Privacy Policy

Last updated: 10 September 2026

1. Who we are

Visit the Americas is the trading name of [LEGAL ENTITY NAME], whose registered address is [REGISTERED OR TRADING ADDRESS]. We
are the data controller for the personal information described in this policy.

Privacy contact: [email protected].

2. What we collect and why

What	Why	Lawful basis
Name, email, phone or WhatsApp number	To reply to you, and to manage your listing or order	Contract; legitimate interests
Property or guide details (address or locality, capacity, rates, description, languages, licence authority and number)	To assess an application and to publish a listing if verified	Contract; legitimate interests
Verification documents — proof of ownership, photo ID, guide licence, operator licence, first-aid certificate, insurance certificate, company registration, activity certifications	To verify that you are entitled to be listed, and to check credentials before publishing. Required by our own verification standard.	Explicit consent; substantial public interest (preventing or detecting unlawful acts)
Consent record — date, version of the terms accepted, IP address and browser user-agent at submission	To evidence that you agreed to our terms, if that is ever disputed	Legal obligation; legitimate interests
Order details — name, email, billing country, products purchased, order status	To fulfil and support your purchase and to meet tax and accounting obligations	Contract; legal obligation
Technical data — IP address, device and browser type, pages viewed, referring site, approximate location	To keep the Site working and secure, and to understand which content is useful	Consent (analytics cookies); legitimate interests (security and core functionality)

We never receive or store your full card details. Card payments are handled
entirely by our payment processor.

3. Verification documents are handled separately

Applications to list a property or guide service include identity and certification documents.
We treat these as confidential:

• They are stored outside the publicly accessible area of our website. There is
  no public link to them.
• Access is limited to staff who need them to complete verification.
• They are used only to verify your eligibility to be listed. We do not use them
  for marketing, profiling, or any other purpose.
• We do not sell them, and we do not share them with other hosts, guides or advertisers.

Providing them is voluntary, but we cannot verify or publish a listing without them. You may
withdraw consent at any time by writing to [email protected], after which your application will be closed;
documents we are required to keep for a legal reason may be retained for that reason only.

4. How long we keep it

• Verification documents: for as long as the listing is live, plus 12 months
  after the listing ends or is withdrawn, so we can evidence that a badge was properly issued.
  Deleted thereafter.
• Consent records: kept for the same period, as our evidence of consent.
• Order records: 6 years, to meet tax and accounting requirements.
• Unsuccessful or withdrawn applications: 12 months, then deleted.
• Analytics data: as set out in our Cookie Policy
  (Google Analytics 4 retention, currently 14 months).

5. Who we share it with

We share personal data only where necessary, with:

• Hosting and infrastructure — our cloud host and Cloudflare (content delivery
  and security).
• Payment processing — our payment provider, to take and refund payment.
• eSIM fulfilment — the wholesale carrier partner that provisions your eSIM, to
  whom we pass only what is needed to allocate and activate it.
• Email delivery — our mail infrastructure providers, to send order confirmations
  and service messages.
• Analytics — Google Analytics, where you have consented.
• Affiliate and booking partners — when you click an affiliate link, the partner
  may set cookies and receive a referral identifier, including your IP address.
• Professional advisers and authorities — where required by law, or to establish,
  exercise or defend legal claims.

We do not sell your personal information.

6. International transfers

We are based in England and Wales, but some of the providers above are located outside the UK/EEA,
particularly in the United States. Where we transfer personal data outside the UK or EEA we rely
on an appropriate safeguard, such as the UK International Data Transfer Addendum or the European
Commission’s Standard Contractual Clauses, together with a transfer risk assessment. You can ask
us for details of the safeguards in place by writing to [email protected].

7. Your rights

Depending on where you live, you may have the right to:

• be informed about how we use your data (this policy);
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased, where there is no overriding legal reason for us to keep it;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting the lawfulness of prior processing;
• complain to a supervisory authority. In the UK that is the Information Commissioner’s Office
  (ico.org.uk).

To exercise any of these, write to [email protected]. We will respond within
one month. We may need to verify your identity first.

California residents: you have the right to know what personal information we
collect, to request deletion, to opt out of the sale or sharing of personal information (we do
not sell personal information), and not to be discriminated against for exercising these rights.
Write to [email protected].

8. Cookies

We use cookies and similar technologies. See our Cookie Policy
for the full list and how to control them.

9. Security

We use encryption in transit, restricted administrative access, and a firewall and intrusion
protection in front of our website. Verification documents are held outside the public web area.
No system is perfectly secure, but we take these obligations seriously and review our measures
regularly.

10. Children

Our services are not directed at children under 18, and we do not knowingly collect their
personal data. If you believe a child has provided us with personal data, contact [email protected] and we
will delete it.

11. Changes

We may update this policy. The version on this page, with its “last updated” date, is the
version in force. Material changes will be highlighted on the Site.

12. Contact

[LEGAL ENTITY NAME]
[REGISTERED OR TRADING ADDRESS]
Email: [email protected]