Privacy Policy

Last updated: 8 November 2026

This policy explains, in plain language, what personal information we collect when you use this website, why we collect it, and what choices you have.

Who we are

South America by Kata Travels is a consumer brand for private, tailor-made trips in South America. Trips are planned and operated by Kata Travels and verified local destination partners.

The controller responsible for your personal data on this website is Insight Vacations S.R.L., Av. Maipú 2931, 3A, Olivos (CP 1636), Buenos Aires, Argentina, CUIT 30-71809845-5. You can reach us at hello@katatravels.com.

What we collect and why

When you send us a request

Our website does not take bookings or payments. When you use one of our forms (trip planning, a request about a specific journey, or the contact form), we collect the information you give us so that we can answer your request and prepare a personal quote. Depending on the form, this may include:

• your name and email address;
• your phone or WhatsApp number (optional);
• your country of residence and the language you would like us to reply in;
• destinations you are interested in, travel dates and how flexible they are;
• the number of adults and children travelling, and, if you choose to tell us, the children’s ages;
• an indicative budget (amount, currency and whether it is per person or in total) — optional;
• your preferred travel style and any message you write to us.

Please do not include sensitive information (for example health details) in your message unless it is necessary for planning your trip.

Information recorded automatically with your request

• which journey or experience page your request concerns, the address (URL) of the page you sent it from, and the language version of the site you were using;
• campaign parameters (so-called UTM parameters) if they were present in the web address you first arrived on. These are kept only in your browser for the current session and are sent to us only if you submit a form. They help us understand which campaigns bring requests;
• the date and time you gave your consent and the version of the consent text you saw.

Marketing (only if you opt in)

Our forms include a separate, unticked box to receive marketing messages from us. We only send you marketing if you tick it. You can withdraw this consent at any time by contacting us at hello@katatravels.com. Not ticking the box has no effect on your request.

Spam protection

To protect our forms from automated abuse, we use a hidden form field, a check on how quickly the form was filled in, and a limit on how many requests can be sent from the same connection. For that limit, your IP address is converted into a hashed value (it is not stored in readable form), and this value is kept for one hour only. We do not use a CAPTCHA or any third-party anti-spam service.

Emails

When you send a request, our website sends a notification to our team and a confirmation email to you. These emails are delivered through our email service provider.

Cookies and analytics

We do not set analytics or marketing cookies by default. See the Cookies section below and our Cookie Policy for details.

Legal basis

We rely on:

• Steps taken at your request before entering into a contract — to answer your request and prepare a quote;
• Your consent — for optional marketing messages and, if enabled, analytics cookies. You can withdraw consent at any time without affecting processing that took place before;
• Our legitimate interests — to keep our website secure and protect our forms from spam, and to understand which campaigns bring requests.

How long we keep it

Requests sent through our forms are stored in our website’s database and are automatically deleted after 24 months. The hashed spam-protection value is deleted after one hour. If your request leads to a booking, your data will be handled under the separate booking terms and privacy information provided by the trip operator. Copies of emails held by our team and by our email provider may be kept for up to 24 months.

Access to requests stored on the website is limited to site administrators.

Who we share it with

We do not sell your personal data and we do not share it with third parties for their own marketing.

We share it only where needed:

• Kata Travels and local destination partners — our intention is to share your request only with the partners who help prepare or operate your trip, and only as far as needed to prepare your quote or trip. These are local ground operators, guides, drivers, hotels and lodges, airlines and activity providers in the countries you visit.
• Service providers who process data on our behalf, such as our website hosting provider and our email delivery provider;
• Authorities where we are legally required to do so.

International transfers

Because our trips take place in South America and our partners are based there, your request may be transferred to countries outside your own, including outside the EU/EEA and the UK. We are based in Argentina, which the European Commission recognises as providing an adequate level of data protection. We share with partners in other countries only what your trip needs, and where the law requires it we use appropriate safeguards such as standard contractual clauses.

Your rights

Depending on where you live, you have rights over your personal data. If you are in the EU/EEA or the UK, the General Data Protection Regulation (GDPR / UK GDPR) applies; if you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) applies. In general terms, these include the right to:

• ask for access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• receive your data in a portable format (export);
• object to or ask us to restrict certain processing;
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email us at hello@katatravels.com. We will respond within 10 calendar days for access requests and 5 business days for corrections or deletion, as Argentine law (Ley 25.326) requires, and in any case within one month. We may need to confirm your identity first.

You also have the right to complain to a data protection supervisory authority — for example, the authority in the country where you live or work (in Brazil, the ANPD). As the operator is based in Argentina, the supervisory authority under Argentina’s Personal Data Protection Law (Ley 25.326) is the Agencia de Acceso a la Información Pública (AAIP).

Cookies

For information about the cookies used on this website and how to change your choices, please see our Cookie Policy.

Contact

If you have any questions about this policy or how we handle your data, contact us at:

Insight Vacations S.R.L. · Av. Maipú 2931, 3A, Olivos (CP 1636), Buenos Aires, Argentina · hello@katatravels.com

Changes

We may update this policy from time to time, for example if the website changes or the law requires it. The date at the top shows when it was last updated. If we make significant changes, we will make this clear on the website.