Privacy Policy

Effective Date: February 01, 2026

‍

This Privacy Policy explains how Treehouse Adventures EIRL and Treehouse Lodge, LLC (together, "Treehouse," "we," "us," or "our") collect, use, and protect personal information when you visit our website, contact us, or book a stay.

This policy is written to comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this policy describes the rights you have over your personal data.

1. Who We Are (Data Controller)

Treehouse acts as the data controller for the information we collect. You can contact us about this policy or your data at: contact@treehouselodge.com

If you are in the EU, EEA, UK, or Switzerland and need to reach us specifically about data protection, please write to the same address with the subject line "Data Protection Request."

2. What Information We Collect

We aim to collect only what we need to handle your booking and respond to your inquiries. This typically includes:

Identity & contact details: name, email address, phone number, country of residence, and (if relevant) passport or ID details required for transportation logistics.
Booking details: check-in/check-out dates, number of guests, dietary restrictions or accessibility needs you choose to share, and excursion preferences.
Payment information: processed by our third-party payment provider; we do not store full credit card numbers on our systems.
Communications: messages, emails, and form submissions you send us.
Technical data: IP address, browser type, device information, and basic analytics about how you use our website (collected through cookies — see Section 9).

We do not knowingly collect personal data from children under 16 without parental consent.

3. Why We Use It (Purposes & Legal Basis)

Under GDPR, every use of personal data must have a legal basis. Ours are:

PurposeLegal BasisProcess your booking and deliver the services you've paid forPerformance of a contractSend booking confirmations, pre-arrival information, and travel logisticsPerformance of a contractRespond to inquiries and customer support requestsLegitimate interest / pre-contract stepsComply with tax, accounting, immigration, and safety regulationsLegal obligationImprove our website and services through analyticsLegitimate interest, with your consent where requiredSend marketing emails (only if you opt in)Consent — withdrawable at any time

4. Who We Share It With

We share personal data only with parties that need it to deliver your booking or operate our business. These include:

Payment processors
Local transportation and excursion partners
Booking platforms we use to manage reservations
IT, hosting, and analytics service providers
Government authorities or law enforcement, if legally required

We do not sell personal information to advertisers or third parties.

5. International Transfers

Treehouse operates in Peru (where our lodge is located) and the United States (where Treehouse Lodge, LLC is registered). If you are located in the EEA, UK, or Switzerland, your personal data will be transferred outside your home region in order to deliver your booking.

Where required by GDPR, we rely on Standard Contractual Clauses or other approved safeguards with our service providers, and we limit the data transferred to what is strictly needed.

6. How Long We Keep It

We keep personal data only as long as needed for the purpose it was collected:

Booking and payment records: retained for the duration of your stay and up to 7 years afterward to meet tax and accounting obligations.
Inquiries and communications: retained up to 2 years after our last contact.
Marketing list: retained until you unsubscribe.
Website analytics: retained for up to 14 months.

After these periods, data is deleted or anonymized.

7. Your Rights Under GDPR

If you are in the EEA, UK, or Switzerland, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your data ("right to be forgotten"), where applicable
Restrict how we use your data
Object to processing based on legitimate interest, including direct marketing
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where consent is the legal basis
Lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, the CNIL in France, or your country's equivalent)

To exercise any of these rights, email us at the address in Section 1. We will respond within 30 days.

8. How We Protect Your Data

We use reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS), restricted access on a need-to-know basis, and secure third-party providers. No system is 100% secure, but we work to keep your data safe and notify affected users in the unlikely event of a breach involving personal data.

9. Cookies & Analytics

Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand how visitors use the site. Where required by law, we ask for your consent before setting non-essential cookies. You can control or delete cookies through your browser settings at any time.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be highlighted on our website.

11. Contact Us

For any privacy-related questions, requests, or complaints:

contact@treehouselodge.com