Privacy Policy
Colombian Beauty Travel ("CBT", "we", "us") helps adults plan non-surgical cosmetic, dental and wellness treatments in Colombia, combined with travel. We are the controller of the personal data described in this policy.
We operate in Colombia through COLOMBIAN BEAUTY TRAVEL S.A.S, NIT 901401871 – 8, which is our legal entity in Colombia.
We only collect what we need to answer you, plan your trip and treatment, and improve our website. We do not sell your personal data, and we do not use it for automated decisions about you.
| What we collect | Examples | Why we use it | Legal basis (GDPR / LGPD) |
|---|---|---|---|
| Contact and inquiry details | Name, email, phone, country, treatments and activities you're interested in, travel dates | To answer your inquiry and prepare a proposal | Steps you request before a contract; our legitimate interest in answering you |
| Booking and payment details | Booking choices, deposit and payment records | To confirm and manage your booking | Performance of our contract with you; legal and tax obligations |
| Health information | Medical history, medications, photos, X-rays and similar records you send after placing a deposit | To check that a treatment suits you and to share with the provider who will treat you | Your explicit consent, given before you send it |
| Messages | Emails and WhatsApp messages you send us | To communicate with you | Performance of our contract; our legitimate interest in answering you |
| Website usage data | Pages viewed, device and browser type, approximate location, how you arrived | To understand how the site is used and improve it | Your consent where required (see section 3); otherwise our legitimate interest |
Payment card details are entered directly into our payment provider's system. We do not see or store your full card number.
You can withdraw consent to our use of your health information at any time by contacting us. This does not affect processing already carried out, but it may mean we can no longer arrange your treatment.
We use one strictly necessary cookie and two analytics tools. No advertising cookies are used.
Your choice. If you visit from the EU/EEA, UK, Switzerland, Brazil or Canada, or if we cannot tell where you are, we show a banner with equal Accept and Reject buttons. No analytics load until you click Accept. Visitors from other countries, such as the US and Colombia, do not see the banner, and analytics run by default.
Changing your mind. Anyone can change or withdraw their choice at any time through the "Cookie settings" link in the footer. Withdrawing consent deletes the analytics cookies immediately. Your choice is saved in your browser's local storage (key cbt-consent), not in a cookie, and is not sent to us.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| preferred-locale | CBT | Remembers your language | 30 days | Strictly necessary |
| _ga, _ga_2RMWZSRB4M | Google Analytics 4 (Google LLC) | Usage statistics and traffic sources | Up to 2 years | Analytics, consent required where noted above |
| ph_…_posthog, plus matching browser storage | PostHog (PostHog Inc., US-hosted, routed through j.colombianbeautytravel.com) | Product analytics: how visitors use the site | About 1 year | Analytics, consent required where noted above |
About Google Analytics. Google Analytics does not log or store IP addresses. We keep analytics event data for 14 months. We have enabled Google Signals, which lets Google link your visits across devices if you are signed in to a Google account and have allowed ad personalization in your Google settings. You can manage this at myadaccount.google.com or install the Google Analytics opt-out add-on. See how Google uses data from sites that use its services.
Do Not Track. Our website does not currently respond to browser Do Not Track signals. You can always opt out of analytics through "Cookie settings".
We share personal data only with the people and companies that help us serve you, and only as much as they need.
We are based in the United States and Colombia, and our service providers may process data in other countries. When we transfer data out of the EU/EEA, UK, Switzerland or Brazil, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the recipient is certified), standard contractual clauses, or, for transfers to your treatment provider, the fact that the transfer is necessary to provide the service you asked for. You can ask us for details of these safeguards.
After these periods we delete or anonymize the data.
Client forms and documents are stored in a secure, access-controlled database. Only staff who need the information to arrange your treatment can access it. Data is encrypted in transit. No system is perfectly secure, and we will notify you and the authorities of a data breach where the law requires.
Depending on where you live, you can ask us to:
To make a request, email . We may ask you to confirm your identity. We will reply within one month, or sooner where local law requires. We will not treat you differently for exercising your rights.
EU/EEA, UK and Switzerland. You can lodge a complaint with your local data protection authority. In France, this is the CNIL. In the UK, it is the ICO.
Brazil. You have the rights listed in Article 18 of the LGPD, including confirmation that we process your data and information about who we share it with. Our data protection officer (encarregado) is Stephen Aguey, . You can also complain to the ANPD.
Canada, including Quebec. The person in charge of protecting personal information is Stephen Aguey, CEO, . Your data may be stored or processed outside Quebec and Canada, as described in section 5. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
Colombia. Under Law 1581 of 2012, you can know, update, correct and delete your data, request proof of your authorization, and revoke it. We answer queries within 10 business days and claims within 15 business days, with any extension the law allows. If your claim is not resolved, you can complain to the Superintendencia de Industria y Comercio (SIC).
California. You can review and request changes to your personal information by contacting us. California residents may also ask how we share personal information with third parties for their direct marketing purposes. We do not share it for that purpose.
Our services are only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
We may update this policy from time to time to reflect changes in our practices or in the law. Any updated version will be published on this page, and we will notify our clients directly of any significant changes.
For any question about this policy or your data, contact or write to Colombian Beauty Travel LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA, Attn: Stephen Aguey.