Privacy and personal data

Effective date and last review: October 29, 2026.

Who handles your information

Bessones Tourism and Transportation LLC (Wyoming) handles sales, agency accounts, billing and payment records. In Colombia, Bessones Transporte Colombia S.A.S. (tax ID 901018858-1) handles transportation operations and Bessones Turismo Colombia S.A.S. BIC (tax ID 901204236-6) handles destination experiences. Each handles the data necessary for its role. Contact the common customer-care channel below for any of these entities.

Data and purposes

Agency registration collects agency name, business identification, country, corporate email, contact name, phone and tourism registration or equivalent. We use these to verify the application, communicate the decision and manage individual access. Approval is manual; declaring a name does not grant access.

Service requests collect the traveler's name, date, time, passenger and bag counts, pickup and destination, contact details, timezone, flight if relevant and instructions. They are used for quotations, reservations, service coordination, assistance and contractual obligations. Accounts and requests remain linked to their owner. Payment records include amount, currency, provider reference and verified status, separately from operational availability.

The server and service providers may process technical connection, security and error records to operate and protect the service. Registration, reservation and payment communications are service messages; the required form authorization does not subscribe you to marketing.

WordPress, payments and recipients

WordPress stores agency applications, accounts and service requests. Our hosting and email providers support storage and operational notices. The relevant local operator receives information needed to perform the service; it must not be used for unrelated purposes.

Public purchases take place in Shopify and are also subject to the store's privacy information. Private agency card entry uses Stripe's payment fields. Card details are sent to Stripe, rather than stored as full card numbers or CVC in our request records. Stripe may also process device and fraud-prevention information and acts as processor or independent controller depending on the activity. See Stripe privacy and Shopify privacy.

These providers and the LLC may process information outside Colombia, including in the United States and other provider locations. Applicable international processing requirements and safeguards must be respected; using this site does not waive your rights. Authorities may receive information when legally required.

Authorization, travelers and sensitive information

We request informed authorization where required and process information necessary for the requested service, legal duties and security as permitted by applicable law. If an agency provides traveler information, it must have authority to share it and make this notice available to the travelers. Do not submit card secrets, passwords, unnecessary identity documents or health information in free-text fields. Any necessary sensitive data requires a specific protected collection process and appropriate authorization. Data about children must be limited to what is necessary for their travel, protect their best interests and be provided by an authorized adult.

Retention and protection

Information is retained only as needed for the application, account, service, accounting and legal obligations, claims and dispute periods; when no lawful purpose remains, deletion or anonymization must be arranged, including the applicable backup cycle. A deletion request does not override mandatory retention or an unresolved legal obligation. Access is restricted by role and identity; no system can guarantee absolute security.

Your rights and how to exercise them

You may request access, correction, updating, proof of authorization, information on use, and deletion or withdrawal of authorization when legally appropriate, without charge. Write to the contact below or use Requests and complaints, selecting Personal data. State your name, reply address, request and relevant reference; we will request only proportionate identity verification. No full identity document or payment card is required in the initial form.

For Colombian data-rights requests, consultations are answered within 10 business days, with a reasoned extension of up to 5 additional business days notified before the initial deadline. Complaints are answered within 15 business days from the day after receipt, with a reasoned extension of up to 8 additional business days when legally applicable. Incomplete complaints are subject to the correction procedure in Article 15 of Law 1581. You may complain to the SIC after completing the applicable prior procedure. Other mandatory rights and time limits in your jurisdiction remain available.

Contact and legal notices

contacto@bessonestransportecolombia.com · +57 300 484 5438
Cra. 4 #136-60, Santa Marta, Colombia.
1120 Donegan Ave, Kissimmee, Florida, United States.