Privacy Policy

1. Responsible party

Keys To Colombia SAS, NIT 901870829-9, Medellín, Antioquia, Colombia.

Privacy contact: keystocolombiatravel@gmail.com

2. Data we collect

• full name;
• email address;
• WhatsApp number;
• account and authentication identifiers;
• Key and membership information (Key code, status, validity dates);
• purchase and payment reference and payment metadata (for example amount, currency, status, transaction reference);
• redemption history;
• participating businesses where benefits were redeemed;
• referral attribution, where applicable;
• technical and security information reasonably necessary to operate the application.

3. Payment card data

Card payments are processed through our payment provider. In the normal checkout architecture, Keys To Colombia does not need to store your full card number or security code; we work with payment references and payment metadata returned by the provider. The provider processes card data under its own terms and security standards.

4. Purposes

• process purchases;
• create and administer Keys;
• authenticate members;
• validate benefits and redemptions;
• enforce benefit limits;
• provide customer support;
• send transactional and operational communications;
• verify payments;
• prevent fraud and protect security;
• attribute referrals where applicable;
• comply with legal and accounting obligations;
• operate and improve the service.

5. WhatsApp communications

Your WhatsApp number is used for purchase-related communication, membership and service communication, customer support and other necessary operational communication.

We do not add customers automatically to promotional WhatsApp campaigns, and purchasing does not require consent to unrelated marketing. If we introduce marketing communications in the future, they will use a separate, specific consent mechanism.

6. Sharing

• the payment processor, to process and verify payments;
• infrastructure and service providers that host and operate the application;
• participating partner businesses, only to the limited extent necessary to validate a benefit at the moment of redemption — they do not receive your complete purchase history;
• legal, accounting and professional service providers where legitimately required;
• authorities, when required by law or legal process.

7. Your rights

Under applicable Colombian data-protection law you may request access to your data, correction or update, information about how it is used, proof of the authorisation granted where applicable, deletion where legally applicable, and revocation of your authorisation where legally applicable. You may also submit queries and complaints.

Requests channel: keystocolombiatravel@gmail.com

You may also contact the Superintendencia de Industria y Comercio (SIC) — https://www.sic.gov.co/

8. Retention

We retain personal data for as long as reasonably necessary for the purposes described above, for the duration of the contractual relationship, for fraud and security records, and to satisfy accounting requirements and applicable legal obligations. When that is no longer the case, data is deleted or anonymised.

9. Changes

We may update this policy. The version applicable to your purchase is recorded with your checkout, and updated versions are published on this page with a new version identifier and date.