Privacy Policy

USGAR Hotels (759 Calle Hospital, Centro de Cusco, Cusco, Peru). For any question about this policy or your personal data, contact us at info@usgarhoteles.com.

Booking form: name, email address, phone number, travel dates and number of guests. This data is required to create and manage your reservation.

Newsletter form: email address, only if you subscribe voluntarily.

Payment: card payments are processed by MercadoPago on their secure platform. We never see or store your card number.

Technical data: a session cookie (HTTP-only) keeps you logged in and secures your booking. IP address may be logged for security and fraud prevention.

To execute the booking contract you request (accommodation, payments, confirmations).

To comply with Peruvian legal obligations (tax and lodging records).

For the newsletter, only with your explicit consent, which you can withdraw at any time.

Legitimate interest in securing the website and preventing fraud.

This website only uses strictly necessary cookies (the session cookie that keeps your booking and login secure). Under Peruvian law (Law No. 29733) and the GDPR, necessary cookies do not require consent.

When you use the payment form, MercadoPago may set its own cookies on their domain, governed by their privacy policy.

We do not use marketing, advertising or analytics cookies.

Peru - Law No. 29733: you may request access, rectification, cancellation or opposition to the processing of your data. We will respond within the legal deadlines (20 business days for access, 10 for rectification, cancellation or opposition).

EU/EEA guests - GDPR: right of access, rectification, erasure, restriction, portability and objection. You may file a complaint with your local data protection authority.

To exercise any right, write to us at info@usgarhoteles.com identifying yourself.

Booking data is kept for the duration of your stay and for the period required by Peruvian tax and lodging regulations. Newsletter data is kept until you unsubscribe.

We use HTTPS, hashed/encrypted session tokens and access controls. Data is not sold or transferred to third parties except for payment processing (MercadoPago) and legal requirements.