Last updated: 3 September 2026

Ecuador Lifetime Experience (“we”, “us”, “our”) is a tour operator based in Quito, Ecuador. We plan tailor-made journeys across Galápagos, the Highlands, the Amazon, and the Pacific Coast. This Privacy Policy explains what personal data we collect, why we use it, who we share it with, and the rights you have under Ecuador’s Ley Orgánica de Protección de Datos Personales (LOPDP) and, where it applies, other data-protection laws (including the EU/UK GDPR if you enquire from those territories).

This page covers personal data processed through www.ecuadorexperience.travel, email, WhatsApp, telephone, and any form or message you send us. It does not cover websites or apps of lodges, yachts, airlines, or parks that we may book on your behalf — those providers have their own notices.

1. Who is responsible

The data controller is Ecuador Lifetime Experience, Quito, Ecuador.

Privacy and data requests: sales@ecuadorexperience.travel
Telephone: +593 2 739 351
WhatsApp: +593 996 687 121

2. Personal data we collect

We collect only what we need to answer an enquiry or to operate a journey you have asked us to plan:

• Identity and contact — name, email, telephone or WhatsApp number, country of residence, and preferred language.
• Travel details — proposed dates, group size, ages (including whether anyone is a minor), regions or activities of interest, pace, and budget range if you share one.
• Booking and payment administration — passport names and dates of birth when a supplier or park requires them; deposit and balance references; invoices. We do not store full card numbers on this website (the shop and checkout are not in use).
• Health and accessibility (special category) — only if you volunteer information we need for safety or supplier briefings (for example altitude, mobility, dietary needs). We ask you not to send medical records unless we specifically request a detail for a named trip.
• Technical data — IP address, browser type, device, pages viewed, and approximate location derived from IP, collected by the hosting stack (including caching and security services) so the site can run.
• Correspondence — the content of emails, WhatsApp messages, and call notes needed to plan or support your trip.

3. How we collect it

• Directly from you, when you write, call, or use WhatsApp.
• From a travel companion or agent you have authorised to plan on your behalf.
• Automatically, when you browse the site (cookies and similar technologies — see below).
• From suppliers only as needed to confirm a reservation you asked us to make (for example a lodge confirming a rooming list).

4. Why we use it and legal bases

Under the LOPDP we rely on one or more of: performance of a contract or pre-contractual steps you requested; our legitimate interest in operating a tour business and securing the site; consent where we ask for it (for example optional marketing); and a legal obligation (invoices, tax, or a binding request from a competent authority).

• To reply and design an itinerary — contract / pre-contract.
• To book lodges, yachts, transfers, and park services — contract.
• To send operational messages about a booked trip — contract.
• To keep the website available and secure — legitimate interest.
• To send occasional news or offers — only with consent, which you may withdraw at any time.
• To keep records required by Ecuadorian tax and commercial law — legal obligation.

5. Who we share data with

We do not sell your personal data. We share it only with:

• Suppliers on your itinerary — lodges, yacht operators, drivers, guides, and park or permit authorities (including Galápagos National Park processes where a trip requires them).
• Communications providers — email and WhatsApp (Meta Platforms). Messages you send on WhatsApp are also subject to Meta’s terms and privacy policy.
• Hosting, security, and content-delivery providers that host this website and protect it from abuse.
• Professional advisers and authorities if the law requires it, or to establish or defend a legal claim.

Each supplier is an independent controller or processor for the data they receive. We share the minimum needed for the booking.

6. International transfers

Some providers (including WhatsApp/Meta and parts of our hosting or security stack) process data outside Ecuador. Where we transfer personal data abroad we do so because it is necessary to reply to you or to deliver the journey, and we take reasonable contractual and practical steps available to us. If you are in the EEA or UK, those transfers may also rely on an adequacy decision or standard contractual clauses used by the relevant provider.

7. How long we keep data

• Unconverted enquiries — up to 24 months after the last message, then deleted or anonymised unless you ask us to keep a file open.
• Booked journeys — for the trip plus at least 7 years for tax and commercial records in Ecuador, or longer if a claim is outstanding.
• Passport copies — only as long as a supplier or park process requires, then deleted from our active files.
• Server and security logs — typically 30–90 days unless needed to investigate an incident.

8. Security

We use access controls, TLS on this website, and least-privilege sharing with suppliers. No transmission over the internet is completely secure. Please do not send passport scans or payment card numbers on an open WhatsApp thread unless we have agreed a method with you.

9. Cookies and similar technologies

The site uses cookies and similar storage that are necessary to deliver pages, keep a session, cache content, and protect against abuse. We do not use the site to run a third-party advertising network. You can block cookies in your browser; essential cookies may then prevent parts of the site from working. If we later add optional analytics, we will update this notice and, where required, ask for consent.

10. Your rights

Subject to the LOPDP and any other law that applies to you, you may request to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• delete data when it is no longer needed or was processed unlawfully;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• receive a portable copy of data you provided, where technically feasible;
• lodge a complaint with Ecuador’s Superintendencia de Protección de Datos Personales, or with your local supervisory authority if you live in the EEA or UK.

Write to sales@ecuadorexperience.travel. We may need to verify your identity before we act. We will respond within the time the applicable law requires.

11. Children

We do not knowingly collect personal data from children for marketing. We may process a minor’s name and age as part of a family itinerary booked by a parent or guardian. People under 18 cannot enter a contract with us on their own.

12. Changes

We may update this notice when our practices or the law change. The date at the top is the current version. Material changes will be posted on this page.

13. Contact

Questions about this Privacy Policy: sales@ecuadorexperience.travel or the telephone and WhatsApp numbers above. Related rules for bookings are in our Booking & Travel Policy and Terms of Use.