Privacy policy
At Andes 411 we take care of the data of everyone who rides with us. This policy explains what data we collect, why we use it, who we share it with, how long we keep it and how you can exercise your rights. It follows Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian personal data protection rules. If this English version and the Spanish version differ, the Spanish version prevails.
1. Data controller
- Controller: Samuel Suárez García, who operates the Andes 411 Motoadventures brand.
- Address: Carrera 49 # 93-94, Bogotá, Colombia.
- Email: info@andes411.com
- Phone and WhatsApp: +57 350 226 9357
- Who handles requests and complaints: Samuel Suárez García, through the channels above.
2. Who this applies to
It covers the data of people who rent a motorcycle or book an experience (riders), people who contact us through WhatsApp, email, social media or this website, and the contact people of partner businesses (hotels, restaurants, workshops and other places along our routes).
3. What data we collect
| Type | Examples |
|---|---|
| Identification | Name, nationality, passport or national ID number and copy, driver's license. |
| Contact | Phone, WhatsApp, email, address, preferred language and an emergency contact. |
| Contract and payment | Signed contract, electronic signature with its technical record (date, IP address and device), rental dates, deposit and payment method. We do not store full card numbers. |
| Communications | Messages, voice notes and files you send us through WhatsApp, Instagram or email. |
| Photos and videos | Photos and videos of the motorcycle's condition at pickup and return, and any route content you choose to share with us. |
| Motorcycle location | GPS position of the motorcycle during the rental. |
| Partners | Name, role and phone number of the business contact person, obtained from you or from public sources such as Google Maps or the business website. |
4. Sensitive data and minors
Sensitive data is data that can affect your privacy or lead to discrimination, such as health or biometric data. You are not required to provide it, and declining does not stop you from renting.
- Medical information for emergencies (for example, allergies or blood type): only if you choose to give it, with a separate authorization. We use it only to share it with medical staff in an emergency, and we delete it from our systems within 30 days after the rental ends.
- We do not use your photos to identify you through biometric features.
Our services are for adults who meet the requirements of the rental contract. We do not knowingly collect data from children or teenagers.
5. Why we use your data
Needed to provide the service:
- Verify your identity and license, quote, book, sign and carry out the rental contract.
- Communicate with you before, during and after the rental, and give you roadside support.
- Handle emergencies, accidents and claims, and process them with insurers and authorities, including notifying your emergency contact.
- Prevent fraud and theft and protect the motorcycles, including GPS tracking during the rental.
- Meet accounting, tax and legal obligations; respond to requests from authorities; manage charges, deposits, traffic tickets and speed camera fines incurred during the rental; and defend ourselves in legal or administrative proceedings.
- Produce internal statistics to improve our routes and service.
Optional (only if you authorize them, and you can withdraw your authorization at any time):
- Send you news, promotions and new routes by WhatsApp or email.
- Recommend routes and experiences based on your travel profile.
- Ask you for a review of your experience after the rental.
- Publish photos or videos in which you appear on our social media, website and promotional material.
- Share your name and phone number with partner businesses on your route (lodging, guides, workshops) to coordinate your trip.
Contact data of partner businesses: we use it to propose and manage partnerships, coordinate services for our riders and stay in touch, including automated WhatsApp messages.
6. Who we share your data with
We do not sell your data. We share it only in these cases:
- Technology providers that provide services we need to operate: Meta (WhatsApp and Instagram), Google (email, Drive, Calendar, Docs and Sheets), Notion (operations database), Jotform (forms and electronic signature), Cloudflare (messaging infrastructure and voice note transcription), Anthropic (artificial intelligence assistants that help us draft messages and organize information) and Hostinger (website and email). Each one handles data under its own terms and security measures.
- The GPS tracking company for the motorcycle.
- Insurers, authorities and courts, when needed to handle a claim or required by law.
- Partner businesses on your route, only if you authorize it.
7. Data outside Colombia
Some of our providers store or process information on servers in several countries, mainly the United States and the European Union. This transfer is made only for the purposes of this policy and with providers that apply recognized security measures. By accepting this policy you authorize this transfer.
8. How long we keep your data
- Contracts, invoices and accounting records (including your name and ID number): 10 years, under Colombian commercial and tax law.
- Copies of ID documents and licenses, pickup and return photos: up to 5 years after your last rental, to speed up future rentals and handle claims. After that they are deleted.
- WhatsApp, Instagram and email conversations: up to 5 years after the last contact.
- Data of people who asked for a quote but did not rent: up to 2 years after the last contact.
- Motorcycle GPS location: up to 6 months after the rental ends, unless a claim or dispute is ongoing.
- Partner business contacts: for as long as the relationship lasts and up to 2 years after.
- Medical information for emergencies: no more than 30 days after the rental ends.
- Data for marketing messages: until you withdraw your authorization.
Our databases will remain in force while Andes 411 operates and for the periods above.
9. How we protect your data
We apply reasonable technical and organizational measures: access limited to those who need it for their work, encrypted connections and providers with recognized security standards. No system is infallible; if an incident affects your data, we will let you know and report it to the authority when required.
10. Your rights
As the owner of your data you can:
- Know, update and correct your data.
- Ask for proof of the authorization you gave us.
- Find out how we have used your data.
- Withdraw your authorization or ask us to delete your data, except when the law or a contract in force requires us to keep it.
- Access your data free of charge.
- File complaints with Colombia's Superintendence of Industry and Commerce (SIC), after contacting us first.
11. How to exercise your rights
Write to info@andes411.com or WhatsApp +57 350 226 9357 with your name, your ID document, your request and a way to reply to you.
- Inquiries (what data we hold and how we use it): we reply within 10 business days. If that is not possible, we tell you why and reply within 5 more business days.
- Complaints (correction, update, deletion or withdrawal): we reply within 15 business days. If that is not possible, we tell you why and reply within 8 more business days. If the complaint is incomplete, we ask for what is missing within 5 days; if 2 months go by without it, we consider the complaint withdrawn.
12. Data from Andes 411's Google accounts
We use artificial intelligence assistants connected to Andes 411's Google accounts (Gmail, Drive, Calendar, Docs and Sheets) to read, organize and answer the business's correspondence and manage its documents. This information is used only to operate Andes 411; it is not sold, not used for advertising and not used to train artificial intelligence models. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access can be revoked at any time from the Google account security settings, and data is deleted according to the periods in section 8.
13. Website
This website does not use tracking or advertising cookies. If we use analytics or non-essential cookies in the future, we will ask for your consent before enabling them and update this policy.
14. Changes to this policy
If we make substantial changes, we will notify you through the contact channels we have before applying them, and publish them on this page. If a change affects the purposes, we will ask for a new authorization.