Privacy Policy

The Whispering Trails is the data controller for all personal data described in this policy. If you have any question about your data, or want to exercise any of your rights, contact us at [email protected].

We only collect information you choose to give us. Through the enquiry forms on this website — including the "Plan Your Ride" form, the brochure download form, the expedition waitlist, and any direct emails — we may collect:

• Your name, so we know how to address you.
• Your email address, so we can reply to you.
• Optional details you choose to share — such as preferred travel dates, riding experience, or the expedition you're interested in — so our reply is genuinely useful to you.

We do not collect payment card details through this website, and we do not use your data for automated decision-making or profiling.

Form submissions are stored in a secure, access-controlled cloud database (Supabase) hosted in the EU/US, protected by row-level security so that only authorised members of The Whispering Trails team can view them. Data is transmitted over encrypted connections (HTTPS) at all times. Access is limited to the team members who need it to respond to enquiries and manage bookings.

We use the data you provide for one purpose: responding to you. Specifically, we may use it to:

• Reply to your enquiry and answer your questions.
• Send you the brochure, itinerary or information you requested.
• Coordinate a booking, waitlist place, or trip planning with you.
• Notify our team internally so the right person follows up with you.

We never sell, rent or trade your personal data to third parties. We do not share it with advertisers, and we do not add you to marketing lists without your explicit consent.

Under GDPR, our legal basis for processing your data is your consent, given when you submit a form or email us voluntarily. Because you initiate the contact, we process your data to respond to you at your request (GDPR Art. 6(1)(b)) and based on your consent (Art. 6(1)(a)). You may withdraw consent at any time by emailing us.

Your data is never sold. It is processed only by the services that keep this website and our communication running: our website hosting, our cloud database, and our email provider (used to send you replies and confirmations). Each provider processes data only on our instructions and under appropriate safeguards. We will disclose data to authorities only where we are legally required to do so.

We keep enquiry data only as long as needed to answer you and manage any resulting booking. If you do not book with us, we keep your details for up to 24 months in case you return, after which they are deleted. If you ask us to delete your data sooner, we will — see your rights below.

This website uses privacy-respecting analytics (Google Analytics) to understand which pages are useful to visitors. Analytics data is aggregated and does not identify you personally. You can block cookies in your browser settings at any time without affecting your ability to browse the site.

Under GDPR, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data ("right to be forgotten").
• Restrict or object to our processing of your data.
• Request a portable copy of your data.
• Withdraw consent at any time, without affecting earlier processing.

To exercise any of these rights, email [email protected] and we will respond within 30 days, free of charge. You also have the right to lodge a complaint with your local data protection authority.

If we update this policy, the new version will be published on this page with a revised date. Significant changes affecting how we use data you have already provided will be communicated to you directly.

The Whispering Trails
5A Avenida Norte, Finca Santa Delfina, Casa F7,
San Pedro Las Huertas, 03001 Antigua, Guatemala
[email protected]

← Back to the homepage