LIMA BUS TURÍSTICO PRIVACY AND DATA PROCESSING POLICY

At LIMA BUS TURÍSTICO (hereinafter, "The Company"), we deeply value the trust of our Users and are committed to protecting their privacy. In compliance with Law No. 29733 (Personal Data Protection Law of the Republic of Peru) and its Regulations, we clearly, transparently, and detailedly inform you below how we collect, use, store, and protect your personal data.

If you have any technical, legal, or commercial query regarding the processing of your information, you can contact us directly through our official channel: operaciones@limabusturistico.com.

1. Controller of your Data

The owner of the personal data bank and the party responsible for processing the information collected through the website www.limabusturistico.com (hereinafter, the "Website") is:

Identity: PERU TRAVEL AND MEETINGS S.A.C. (operator of the LIMA BUS TURÍSTICO brand).

RUC Number: 20609474590

Legal Address: Cal. Manuel Tovar Nro. 155

Phone Channel: +51 950 689 276

Email: operaciones@limabusturistico.com

2. Categories of Data Collected and Purposes of Processing

The Company collects and processes personal data for the following specific and lawful purposes:

1. Management of Queries, Requirements, or Requests: When the User contacts us through web forms, emails, or messaging channels, we use their contact and identification data to process, resolve, and respond to their query.

Legal basis: The explicit consent of the User when submitting their request and our legitimate interest in providing optimal customer service.

2. Processing of Purchases and Execution of the Tourist Service: Upon purchasing tickets or booking excursions on our platform, we use your data to manage the reservation, issue payment vouchers (receipts/invoices), send purchase confirmations, boarding reminders, and conduct satisfaction surveys for quality control.

Legal basis: Execution of a contractual relationship.

3. Subscription to Digital Channels and Content Downloads: If the User voluntarily subscribes to our newsletter, corporate blog, or downloads informative resources, we request their email to send them the requested publications or materials.

Legal basis: Express consent of the User.

4. Access and Use of Onboard Wi-Fi Network: When connecting to the wireless networks of our transport units, basic data (such as name and email) will be requested. This information is processed to authenticate the connection and, under prior authorization, send surveys or information of interest regarding the tourist experience.

Legal basis: User consent and legitimate interest in the continuous improvement of the service.

5. Commercial Communications and Performance Marketing: Subject to free, express, and informed consent, The Company may use your data to send you exclusive offers, promotions, and news about the Lima Bus Turístico circuits. The User may revoke this consent or object to receiving advertising at any time free of charge.

Legal basis: User consent.

6. Management of Cookies and Web Analytics: We collect technical navigation information (IP address, user behavior) anonymously or pseudonymized through cookies to optimize Website speed, improve user experience (UX), and measure our conversions. You can configure or revoke the use of cookies in your browser's settings panel.

Legal basis: Consent upon accepting the site's cookie policy.

3. Data Retention Period

The personal data provided will be kept only for the time strictly necessary to fulfill the purposes for which they were collected, or while the commercial relationship derived from the tourist service is maintained. Subsequently, the data will be blocked and securely stored solely to comply with legal or tax obligations before the Peruvian authorities, proceeding to their definitive elimination once said legal terms have expired.

4. Transfer and Recipients of Information

The Company does not sell, trade, or transfer your personal data to third parties. However, the data may be legitimately shared with the following recipients:

Technology Service Providers (Data Processors): Software companies, integrated payment gateways, hosting services, and email marketing tools that operate under strict confidentiality contracts and technical security mandates.

Legal Compliance: Peruvian public authorities, judicial bodies, or police forces in cases strictly required by law or official regulatory requirements.

International Transfer: In the event that our digital storage servers or technological tools are hosted outside Peruvian territory, The Company guarantees that such cross-border flows are carried out to countries that ensure adequate levels of data protection, aligned with the standards of Peruvian legislation.

5. Users' Rights (ARCO Rights)

In accordance with Law No. 29733, the User is the holder of the rights of information, access, rectification, cancellation, and opposition (ARCO Rights). The User may exercise these rights at any time and completely free of charge by sending a formal request to the email operaciones@limabusturistico.com, detailing the right they wish to execute.

If the User considers that they have not been properly attended to in the exercise of their rights, they have the right to file a formal complaint before the National Authority for the Protection of Personal Data (APDP), an organ attached to the Ministry of Justice and Human Rights of the Republic of Peru.

6. Information Security Measures

The Company has adopted the necessary technical, organizational, and legal security measures to guarantee the confidentiality, integrity, and availability of personal data, preventing their alteration, loss, theft, or unauthorized processing and access, in accordance with the provisions of the Personal Data Protection Law Regulation.

7. Modifications to this Policy

The Company reserves the right to update, modify, or adapt this Privacy Policy to comply with new legal regulations, criteria of the Data Protection Authority, or digital marketing and conversion strategies. Any substantial change will be promptly published on this Website or, if applicable, notified through the email registered by the User.