How we handle your information.

When you book a stay, reserve a Vivus Experience spot, sign up to our newsletter, or message us, you provide information directly. We collect what you give us and the information our payment and booking partners need to confirm a reservation.

• ·Identity: name, date of birth, nationality, government ID where required by law for accommodation registration.
• ·Contact: email, phone, WhatsApp number, address.
• ·Booking: dates, room tier, party size, special requests, dietary restrictions.
• ·Payment: handled by Stripe through the LobbyPMS booking engine. We do not store full card numbers on our systems.
• ·Communications: messages you send us by email, form, or WhatsApp.
• ·Site usage: anonymised analytics covering pages visited, referrer, and device class. We do not use cross-site tracking pixels.

We use your information to confirm and run your booking, communicate with you about your stay or trip, comply with Colombian accommodation law, send the newsletter you opted into, and improve the website.

We do not use your data to train AI models. We do not sell your data to advertisers. We do not buy data about you from brokers.

We share the minimum information required with the partners that make a stay or trip happen.

• ·La Martina Hotel Boutique. The hotel that operates your VivusStay reservation. Confirmation emails and on-property service come from La Martina.
• ·LobbyPMS. Booking engine and PMS that takes the reservation for La Martina Hotel Boutique.
• ·Stripe. Payment processing for deposits and balances.
• ·HubSpot. Email and CRM for inquiries and newsletters.
• ·Travel Counsellors. Only if you opt in to flight assistance.
• ·Colombian government. Guest registration as required by Decreto 2119 of 2018.

Booking and accounting records: as long as Colombian tax law requires (currently 10 years).

Marketing contact information: until you unsubscribe or ask us to delete it.

Server logs and analytics: 90 days, after which they are aggregated or deleted.

You can ask to see, correct, export, or delete the personal information we hold about you. You can withdraw consent for marketing emails any time using the unsubscribe link or by emailing us. We respond to verified requests within 30 days.

For European Union or United Kingdom residents, the legal basis for our processing is contractual necessity (to take the booking), legitimate interest (to operate the business), and consent (for marketing).

See our cookie policy at /legal/cookies for the full breakdown of what we set and why. The short version is that we use a small set of essential cookies (session, security) and one analytics cookie (Plausible or similar privacy-respecting analytics). We do not use Google Analytics or Meta Pixel.

We use TLS for everything in transit. Sensitive payment fields never touch our servers. Access to booking and customer data is restricted to staff who need it. We are not perfect; if we ever discover a breach, we notify affected guests within 72 hours.

We update this policy from time to time. The "last updated" date at the top tells you when. Material changes are emailed to active customers and newsletter subscribers in advance.

Privacy questions, requests, or complaints go to hola@vivus.group. Colombian residents can also contact the Superintendencia de Industria y Comercio.