Privacy Policy
Attraveler Tours, S.A.
Effective date: July 15, 2026 Last updated: July 1, 2026
Attraveler Tours, S.A. ("Attraveler," "we," "us," "our") respects your privacy and is committed to protecting your personal data in accordance with Law No. 81 of 26 March 2019 on the Protection of Personal Data of the Republic of Panama and its implementing regulations, enforced by the National Authority for Transparency and Access to Information (ANTAI). This Policy explains what personal data we collect, why, how we use and protect it, and the rights you have.
Attraveler Tours, S.A. ("Attraveler," "we," "us," "our") respects your privacy and is committed to protecting your personal data in accordance with Law No. 81 of 26 March 2019 on the Protection of Personal Data of the Republic of Panama and its implementing regulations, enforced by the National Authority for Transparency and Access to Information (ANTAI). This Policy explains what personal data we collect, why, how we use and protect it, and the rights you have.
1. Who is responsible for your data
Attraveler Tours, S.A. is the data controller responsible for your personal data.
Legal name: Attraveler Tours, S.A. Jurisdiction: Republic of Panama Registered office: PH Plaza Obarrio, Avenida Samuel Lewis, Panamá. Tax ID (RUC): 155784541-2-2026. Tourism registration: Autoridad de Turismo de Panamá (ATP) Licence No. 982-AV, Privacy contact e-mail: hola@attraveler.com Phone / WhatsApp: +507 6357-5453 Hours: Monday–Friday, 9:00–18:00 GMT-5 (Panama).
If you have any question about this Policy or your data, contact us at hola@attraveler.com.
Attraveler Tours, S.A. is the data controller responsible for your personal data.
Legal name: Attraveler Tours, S.A. Jurisdiction: Republic of Panama Registered office: PH Plaza Obarrio, Avenida Samuel Lewis, Panamá. Tax ID (RUC): 155784541-2-2026. Tourism registration: Autoridad de Turismo de Panamá (ATP) Licence No. 982-AV, Privacy contact e-mail: hola@attraveler.com Phone / WhatsApp: +507 6357-5453 Hours: Monday–Friday, 9:00–18:00 GMT-5 (Panama).
If you have any question about this Policy or your data, contact us at hola@attraveler.com.
2. What personal data we collect
We collect only the data we need to provide our services.
Identity and contact data — full name, e-mail address, telephone number, nationality, and country of residence.
Booking and travel data — passport or ID details where required by a Supplier, date of birth, number and names of travelers, travel dates, and preferences.
Sensitive data you choose to share — dietary requirements, allergies, medical, mobility, or accessibility needs relevant to your Experience. Under Law 81 this is "sensitive data," and we process it only with your explicit consent and solely to deliver your Experience safely.
Payment data — the payment method and transaction details necessary to complete your booking. Card and payment-account numbers are entered into and processed directly by our payment processor, Repayd (formerly Trust My Travel), within its PCI-DSS-compliant systems. Attraveler does not collect, see, or store your full card number, CVV, or equivalent credentials. We retain only limited, non-sensitive transaction records (such as an order reference, amount, date, and the last four digits of the card) for accounting and dispute-handling purposes.
Technical and usage data — IP address, browser and device type, and pages viewed, collected via cookies and similar technologies when you use the Site.
Communications — the content of messages you send us and records of our correspondence.
We collect only the data we need to provide our services.
Identity and contact data — full name, e-mail address, telephone number, nationality, and country of residence.
Booking and travel data — passport or ID details where required by a Supplier, date of birth, number and names of travelers, travel dates, and preferences.
Sensitive data you choose to share — dietary requirements, allergies, medical, mobility, or accessibility needs relevant to your Experience. Under Law 81 this is "sensitive data," and we process it only with your explicit consent and solely to deliver your Experience safely.
Payment data — the payment method and transaction details necessary to complete your booking. Card and payment-account numbers are entered into and processed directly by our payment processor, Repayd (formerly Trust My Travel), within its PCI-DSS-compliant systems. Attraveler does not collect, see, or store your full card number, CVV, or equivalent credentials. We retain only limited, non-sensitive transaction records (such as an order reference, amount, date, and the last four digits of the card) for accounting and dispute-handling purposes.
Technical and usage data — IP address, browser and device type, and pages viewed, collected via cookies and similar technologies when you use the Site.
Communications — the content of messages you send us and records of our correspondence.
3. How we collect your data
We collect data directly from you, when you request a quote, make a booking, create an account, subscribe, or contact us; automatically, through cookies and analytics when you use the Site; and from third parties such as concierge or travel-trade partners who refer you, and our payment processor confirming a transaction.
We collect data directly from you, when you request a quote, make a booking, create an account, subscribe, or contact us; automatically, through cookies and analytics when you use the Site; and from third parties such as concierge or travel-trade partners who refer you, and our payment processor confirming a transaction.
4. Why we use your data and our legal basis
To process, confirm, and deliver your booking and Experience — legal basis: performance of a contract. To process payments and prevent fraud — contract and legitimate interest. To communicate with you about your booking (confirmations, updates, safety information) — contract. To handle enquiries, complaints, and disputes — contract and legitimate interest. To accommodate dietary, medical, or accessibility needs — your explicit consent. To send marketing about our Experiences — your consent (you may withdraw at any time). To comply with tax, accounting, tourism, and other legal obligations — legal obligation. To improve and secure the Site — legitimate interest.
We do not sell your personal data.
To process, confirm, and deliver your booking and Experience — legal basis: performance of a contract. To process payments and prevent fraud — contract and legitimate interest. To communicate with you about your booking (confirmations, updates, safety information) — contract. To handle enquiries, complaints, and disputes — contract and legitimate interest. To accommodate dietary, medical, or accessibility needs — your explicit consent. To send marketing about our Experiences — your consent (you may withdraw at any time). To comply with tax, accounting, tourism, and other legal obligations — legal obligation. To improve and secure the Site — legitimate interest.
We do not sell your personal data.
5. Who we share your data with
We share personal data only as needed to deliver our services and meet legal duties, with: Suppliers — hotels, guides, transport providers, restaurants, and activity operators, limited to the information they need to serve you; Repayd (formerly Trust My Travel), our payment processor, which processes your payment under its own privacy terms and PCI-DSS standards; service providers acting on our behalf (for example, IT hosting, e-mail, booking software, and analytics) under confidentiality obligations; and professional advisers and authorities — accountants, insurers, or government bodies (including the ATP, tax authorities, or ANTAI) where required by law.
We require all recipients to protect your data and to use it only for the purposes we specify.
We share personal data only as needed to deliver our services and meet legal duties, with: Suppliers — hotels, guides, transport providers, restaurants, and activity operators, limited to the information they need to serve you; Repayd (formerly Trust My Travel), our payment processor, which processes your payment under its own privacy terms and PCI-DSS standards; service providers acting on our behalf (for example, IT hosting, e-mail, booking software, and analytics) under confidentiality obligations; and professional advisers and authorities — accountants, insurers, or government bodies (including the ATP, tax authorities, or ANTAI) where required by law.
We require all recipients to protect your data and to use it only for the purposes we specify.
6. International transfers
Some of our Suppliers or service providers may be located outside Panama. Where we transfer your data internationally, we do so in accordance with Law 81, taking reasonable steps to ensure your data receives an adequate level of protection (for example, contractual safeguards with the recipient).
Some of our Suppliers or service providers may be located outside Panama. Where we transfer your data internationally, we do so in accordance with Law 81, taking reasonable steps to ensure your data receives an adequate level of protection (for example, contractual safeguards with the recipient).
7. How long we keep your data
We keep your personal data only as long as necessary for the purposes described above. Booking and transaction records are retained for the period required by Panamanian tax and commercial law (generally [5] years) for accounting and dispute purposes. Marketing data is kept until you unsubscribe or withdraw consent. Enquiries that do not lead to a booking are kept for up to [24] months. When data is no longer needed, we securely delete or anonymise it.
We keep your personal data only as long as necessary for the purposes described above. Booking and transaction records are retained for the period required by Panamanian tax and commercial law (generally [5] years) for accounting and dispute purposes. Marketing data is kept until you unsubscribe or withdraw consent. Enquiries that do not lead to a booking are kept for up to [24] months. When data is no longer needed, we securely delete or anonymise it.
8. Cookies and analytics
The Site uses cookies and similar technologies to make it function, remember your preferences, and understand how it is used. When you first visit, you can accept or decline non-essential cookies through our cookie banner. Essential cookies are necessary for the Site to work and cannot be switched off. You can also manage cookies through your browser settings.
The Site uses cookies and similar technologies to make it function, remember your preferences, and understand how it is used. When you first visit, you can accept or decline non-essential cookies through our cookie banner. Essential cookies are necessary for the Site to work and cannot be switched off. You can also manage cookies through your browser settings.
9. How we protect your data
We apply appropriate technical and organisational security measures to protect your data against loss, misuse, and unauthorised access, including encryption of data in transit, access controls, and reliance on PCI-DSS-compliant infrastructure (Repayd) for all card processing. No system is completely secure, but we work to protect your information and, in line with Law 81, will notify you and ANTAI without undue delay in the event of a security breach affecting your personal data.
We apply appropriate technical and organisational security measures to protect your data against loss, misuse, and unauthorised access, including encryption of data in transit, access controls, and reliance on PCI-DSS-compliant infrastructure (Repayd) for all card processing. No system is completely secure, but we work to protect your information and, in line with Law 81, will notify you and ANTAI without undue delay in the event of a security breach affecting your personal data.
10. Your rights
Under Law 81 of 2019, you have the right to access the personal data we hold about you; rectify data that is inaccurate or incomplete; delete your data where there is no lawful reason to keep it; object to or restrict certain processing; withdraw consent at any time (without affecting processing already carried out); port your data where technically feasible; and lodge a complaint with ANTAI if you believe your rights have been infringed.
To exercise any right, e-mail hola@attraveler.com. We will respond within the timeframe required by Panamanian law and may need to verify your identity first. Exercising these rights is free of charge in ordinary circumstances.
Under Law 81 of 2019, you have the right to access the personal data we hold about you; rectify data that is inaccurate or incomplete; delete your data where there is no lawful reason to keep it; object to or restrict certain processing; withdraw consent at any time (without affecting processing already carried out); port your data where technically feasible; and lodge a complaint with ANTAI if you believe your rights have been infringed.
To exercise any right, e-mail hola@attraveler.com. We will respond within the timeframe required by Panamanian law and may need to verify your identity first. Exercising these rights is free of charge in ordinary circumstances.
11. Marketing
Where you have consented, we may send you news and offers about our Experiences. Every marketing message includes an unsubscribe option, and you can opt out at any time by contacting hola@attraveler.com. Opting out of marketing does not affect essential communications about a booking you have made.
Where you have consented, we may send you news and offers about our Experiences. Every marketing message includes an unsubscribe option, and you can opt out at any time by contacting hola@attraveler.com. Opting out of marketing does not affect essential communications about a booking you have made.
12. Children's privacy
The Site and our booking services are directed to adults (18+). We do not knowingly collect data from children except the information a booking adult provides about minors traveling with them. If you believe we hold a child's data without proper authorisation, contact us and we will address it.
The Site and our booking services are directed to adults (18+). We do not knowingly collect data from children except the information a booking adult provides about minors traveling with them. If you believe we hold a child's data without proper authorisation, contact us and we will address it.
13. Third-party links
The Site may link to third-party websites (for example, Suppliers or social media). We are not responsible for their privacy practices, and we encourage you to review their policies.
The Site may link to third-party websites (for example, Suppliers or social media). We are not responsible for their privacy practices, and we encourage you to review their policies.
14. Changes to this Policy
We may update this Policy from time to time. The current version, with its effective date, is always available on the Site. Where changes are significant, we will take reasonable steps to notify you.
We may update this Policy from time to time. The current version, with its effective date, is always available on the Site. Where changes are significant, we will take reasonable steps to notify you.
15. How to contact us
Contact: Attraveler Tours, S.A. · PH Plaza Obarrio, Avenida Samuel Lewis, Panama City, Panama · hola@attraveler.com · +507 6357-5453
Supervisory authority: Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI), Republic of Panama.
Contact: Attraveler Tours, S.A. · PH Plaza Obarrio, Avenida Samuel Lewis, Panama City, Panama · hola@attraveler.com · +507 6357-5453
Supervisory authority: Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI), Republic of Panama.