HOW WE USE & PROTECT YOUR PERSONAL DATA
1. WHO WE ARE
This Privacy Policy describes how ONIKANO E.I.R.L. (RUC No. 20600566084), located at 4HHX+P9, Llanchama, San Juan Bautista, Loreto, Peru, hereinafter referred to as “Onikano”, “we”, “us” or “our”, collects, uses, stores and protects the personal data of guests, applicants and visitors to this website.
For any questions regarding your personal data, you can contact us through our Contact page.
2. LEGAL FRAMEWORK
We process personal data in accordance with the Peruvian Personal Data Protection Law (Ley N° 29733) and its Regulations (Decreto Supremo N° 016-2024-JUS).
Where the EU General Data Protection Regulation (GDPR) applies to our processing activities, we also process personal data in accordance with its requirements.
3. WHAT PERSONAL DATA WE COLLECT AND WHY
APPLICATION AND CONTACT FORMS
When you submit an application for a retreat or contact us through the website, we collect the information you provide. This may include your name, contact details, country of residence, retreat preferences, travel information and the details of your enquiry or application.
We use this information to respond to you, review your application, manage your booking, communicate with you about your retreat and prepare for your stay.
Information submitted through our website forms is transmitted to our email system and may also be stored in our website database for administrative, safety and continuity-of-care purposes.
HEALTH INFORMATION
Our retreat application form asks for information about your physical and mental health, current medications and relevant medical history.
Health information is sensitive personal data. We collect and process this information in order to review whether participation may be appropriate, identify potential safety concerns and support your wellbeing during ceremonies and throughout your stay.
This information is treated with strict confidentiality and is accessible only to authorised persons involved in reviewing applications, making safety decisions or providing appropriate guest care. It is not used for unrelated purposes.
Health information is processed only for the purposes described above and in accordance with applicable data protection requirements.
CORRESPONDENCE
If you communicate with us by email, we may retain the correspondence for as long as reasonably necessary to respond to your enquiry, manage your booking, maintain a record of arrangements relating to your retreat and support continuity of communication if you return to Onikano.
BOOKING INFORMATION
When you make or request a booking, we may collect information necessary to manage your reservation, including retreat dates, accommodation arrangements, payment status, dietary requirements, arrival information and other practical details relating to your stay.
PAYMENTS
Online payments may be processed through third-party payment providers, including PayPal. Bank transfers are processed through the relevant financial institutions.
We do not receive or store full payment card details. Payment providers and financial institutions process payment information in accordance with their own privacy policies and legal obligations.
4. HOW WE USE YOUR PERSONAL DATA
We use personal data only where necessary for legitimate and specific purposes, including:
- responding to enquiries and communications;
- reviewing retreat applications;
- assessing safety considerations relating to participation;
- managing reservations, payments and administrative records;
- organising arrivals, accommodation, dietary requirements and other practical arrangements;
- providing appropriate care and support during a guest’s stay;
- maintaining continuity of care and relevant records for returning guests;
- operating, maintaining and improving our website;
- understanding how visitors find and use our website;
- complying with legal, accounting, administrative and security obligations.
We do not use information submitted through retreat applications for unrelated advertising, profiling or automated decision-making.
5. WHAT WE DO NOT DO
We do not sell, rent or trade personal data to third parties.
We do not use health information or other information submitted through retreat applications for advertising or commercial profiling.
We do not make decisions about retreat applications through solely automated decision-making.
We do not send marketing communications unless you have expressly agreed to receive them or otherwise requested ongoing communications from us.
6. WHO HAS ACCESS TO YOUR DATA
Within Onikano, personal data is accessible only to authorised persons who need it for legitimate operational, administrative, safety or guest-care purposes.
Health information is limited to those involved in reviewing applications, making decisions concerning safe participation and providing appropriate care during the retreat.
We also use a limited number of third-party service providers to operate and maintain our website, provide hosting and email services, process online payments and provide website analytics. These service providers may process personal data in order to provide their services and are subject to applicable data protection and confidentiality obligations.
We may disclose personal data to professional advisers or public authorities where reasonably necessary or where disclosure is required by law.
7. WEBSITE FORMS AND DATA STORAGE
Information submitted through our website forms may be stored both in our email system and in the database of the website through which the form was submitted.
Access to these systems is restricted to authorised persons who require it for legitimate operational or guest-care purposes.
We take reasonable steps to ensure that stored information is protected against unauthorised access, misuse, loss or disclosure.
Information may also remain temporarily in secure backups created for website recovery and security purposes. Backup copies are retained and overwritten or deleted according to the applicable backup schedule.
8. INTERNATIONAL DATA PROCESSING
Some of the service providers we use may process or store personal data outside Peru.
Where international transfers are subject to specific legal requirements, we take reasonable steps to ensure that personal data is processed with appropriate safeguards and in accordance with applicable data protection law.
9. WEBSITE ANALYTICS AND COOKIES
This website uses essential cookies and similar technologies that support its operation, security and performance.
We also use Google Analytics 4 to understand how visitors find and use our website. Google Analytics may collect information about website usage, such as pages visited, interactions with the website, approximate geographic information, traffic source, and device and browser information.
You can configure your browser to refuse or delete cookies. Please note that disabling certain cookies or technologies may affect the way some parts of the website function.
We are reviewing and improving our cookie consent controls. This Privacy Policy will be updated to reflect any changes to the consent and preference-management mechanisms available on the website.
10. HOW LONG WE KEEP YOUR PERSONAL DATA
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected.
This may include the time necessary to:
- review and manage retreat applications;
- organise and administer bookings;
- communicate with guests before, during and after their stay;
- support continuity of care for returning guests;
- maintain relevant administrative and financial records;
- comply with legal, accounting, security and other legitimate record-keeping obligations.
Retention periods may vary depending on the nature of the information and the purpose for which it is processed.
Health information is retained only for as long as reasonably necessary for safety, continuity of care and legitimate record-keeping purposes.
Where an application does not result in a retreat booking, the applicant may request deletion of their personal data, subject to any legal obligation or other lawful reason requiring us to retain certain information.
Deletion from active systems may not result in immediate deletion from backup copies. Information retained in backups will remain protected and will be deleted or overwritten according to the applicable backup schedule.
11. YOUR RIGHTS
Under Peruvian data protection law, you have the right to request access to your personal data and, where applicable, its rectification, updating, cancellation or deletion, or to object to its processing. You may also withdraw consent where processing is based on your consent.
Where the GDPR applies, you may have additional rights, including the right to restriction of processing and data portability, where the conditions established by law are met.
To exercise any of these rights, contact us. We may need to verify your identity before processing your request and will respond within the timeframes established by applicable law.
If you believe that your data protection rights have not been respected, you may lodge a complaint with the Peruvian National Authority for the Protection of Personal Data (ANPD) or, where applicable, with the competent data protection authority in the European Union.
12. EMBEDDED CONTENT AND LINKS TO OTHER WEBSITES
Pages on this website may include embedded content, such as videos, and links to external websites, including social media platforms.
Embedded content from another website may behave in the same way as if you had visited that website directly. The external provider may collect data about you, use cookies or similar technologies, or monitor your interaction with its content in accordance with its own privacy policy.
We are not responsible for the privacy practices of external websites or services and encourage you to review their privacy policies before providing personal information.
13. DATA SECURITY
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.
These measures include secure HTTPS connections, restricted access to guest information, password-protected systems, website security and backup measures, and confidentiality obligations for persons who have access to personal information.
No method of transmission or electronic storage can be guaranteed to be completely secure. We therefore take reasonable precautions appropriate to the nature and sensitivity of the information we process.
14. MINORS
Our retreats are intended for adults aged 18 and over, and this website is not directed at children.
Due to the intense nature of the retreat environment and the processes taking place during ceremonies and throughout the stay, Onikano does not consider the centre an appropriate environment for anyone under 18.
We do not knowingly collect personal data through retreat applications from anyone under the minimum age required to participate in our retreats.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology or applicable law.
The current version will always be published on this page, with the date of the most recent update shown below.
Where appropriate, significant changes affecting guests with active bookings may also be communicated directly.
Last updated: July 2026
ESPAÑOL
DEUTSCH