Personal data policy

1. Data controller

• Company: SAVIA LIVING S.A.S., trade name AMURANTA.
• Tax ID (NIT): 902.090.004-6. National Tourism Registry (RNT): 298716.
• Address: Calle 39 #14-67, Cartagena de Indias, Bolívar, Colombia.
• Email: comercial@amuranta.com. Phone and WhatsApp: +57 301 316 5088.

2. What data we handle

• Identification and contact: name, phone, email, country or city and, if you write on behalf of a company or agency, your role and the company.
• About your trip, event or program: dates, number of people, preferences and services requested. When a supplier requires it to book (hotel, airline, cruise line or operator), details of your ID or passport.
• Billing: what is needed to issue the invoice. This website takes no payments and no card details.
• Sensitive data, only if you choose to give it: health information to coordinate Medical Concierge logistics, or dietary and mobility needs for a trip or event.
• Browsing: cookie-free website statistics and, only if you accept them, HubSpot and Microsoft Clarity cookies (section 7).

3. What we use it for

• Answering your enquiries and preparing proposals and quotes.
• Booking, coordinating and operating the services you hire: transfers, accommodation, experiences, events and logistics.
• Looking after you before, during and after the trip or event, and measuring service quality.
• Managing our relationship with agencies, companies and suppliers: ground operation and sales representation.
• Invoicing and meeting legal, accounting, tax and Colombian tourism obligations.
• Sending you AMURANTA news and offers, only if you authorize it. You can ask us to stop at any time.
• Understanding how the website is used in order to improve it.

4. Your authorization

We handle your data with your prior, express and informed authorization. You can give it in writing, orally or through unequivocal conduct, for example by contacting us on WhatsApp, by email or by phone and sending us your details to receive a proposal (Decree 1377 of 2013, article 7). We keep proof of that authorization.

No authorization is needed in the cases of article 10 of Law 1581, such as public data or data requested by an authority in the exercise of its duties.

5. Sensitive data and data of minors

You are not required to authorize the handling of sensitive data. If you provide it, we use it only for the purpose you told us, with restricted access, and we ask for your express authorization (Law 1581, articles 5 and 6). AMURANTA does not provide medical services: in Medical Concierge we only coordinate logistics, and the medical decision is yours and your physician's.

Data of minors is handled only when needed for the trip or event, with the authorization of their parent or legal guardian and respecting their best interests (Law 1581, article 7).

6. Who we share it with

• The suppliers that provide the services you request (hotels, transport companies, boat operators, event venues, guides, airlines, cruise lines and, if you ask, healthcare institutions), with only the data they need.
• The agency or company that booked your trip, when we are their ground operator.
• The companies that provide our work tools, acting as data processors: WhatsApp (Meta), Hostinger (website and email), HubSpot (customer management), Plausible and Umami (statistics) and Microsoft Clarity (website analytics).
• Authorities, when the law requires it.
• We do not sell or rent your data.

Some of these services store data outside Colombia, for example in the United States or the European Union. These transfers are made under article 26 of Law 1581 and the instructions of the Superintendence of Industry and Commerce (SIC), or with your authorization.

7. Cookies and website analytics

Plausible and Umami measure visits without cookies and without identifying you. HubSpot and Microsoft Clarity use cookies and only load if you accept them in the website notice. Clarity anonymously records clicks and scrolling to improve the design and masks what is typed into fields by default.

You can change your choice at any time under "Cookie preferences", at the bottom of every page. If you decline them after accepting, we delete those cookies from your browser.

8. Your rights

As the data subject you have the right to (Law 1581, article 8):

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be told, on request, how your data has been used.
• Revoke the authorization or ask us to delete your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.
• File complaints with the Superintendence of Industry and Commerce (SIC), after first making your request or claim to us.

9. How to exercise them

Write to comercial@amuranta.com with the subject "Personal data", or on WhatsApp at +57 301 316 5088. Include your name, your ID document, what you are asking for and the address or email where you want the answer. The area in charge is AMURANTA's Management.

Requests for information: we answer within 10 business days at most. If that is not possible, we tell you why and answer within 5 more business days at most (Law 1581, article 14).

Claims (correction, update, deletion or revocation): we answer within 15 business days at most, extendable by up to 8 more business days with notice. If the claim is incomplete, we ask for what is missing within 5 days; if 2 months pass without it being completed, the claim is considered withdrawn (Law 1581, article 15).

10. Security and retention

We protect your data with reasonable measures: access only for those who need it, an encrypted connection on the website and suppliers with security controls.

We keep it for as long as our relationship lasts and for as long as the purposes of this policy and accounting, tax and tourism rules require.

11. Validity and changes

This policy is in force since October 7, 2026. The databases will remain in force for as long as the purposes described are maintained. If we make substantial changes, we will publish them on this page before applying them.