Privacy policy

Last updated: 28 October 2026

Introduction

CotopaxiPungo Finca Hotel respects the privacy of people who visit this website, contact the hotel, or make a reservation. This policy explains how we handle personal data connected with those activities.

Controller and contact

The data controller is PUYURIMA TURISMO COMPAÑÍA LIMITADA (RUC 1792364728001), operator of CotopaxiPungo Finca Hotel, located at Vía Pita Tambo s/n y Vía Condorcucho, Parroquia Rumipamba, Pichincha, Ecuador. For questions or requests about your personal data, contact the hotel by email at [email protected], by telephone at +593 2 361-5298, or through WhatsApp at +593 99 955 1216. We may request reasonable information to verify your identity before responding.

Data we may collect

Depending on your interaction, we may process identification and contact details, information needed for reservations and invoicing, stay preferences and special requests, communications with the hotel, and basic technical browsing data. Payment information is processed by the relevant booking or payment platforms; CotopaxiPungo Finca Hotel should not receive or retain complete card information outside those authorised services.

Purposes and legal basis

We use data to answer enquiries, manage reservations and stays, process payments through authorised providers, comply with legal obligations, protect the security of the website and property, and improve our service. We send marketing communications only where there is a valid legal basis, including consent where required; you may withdraw it at any time.

Service providers and disclosures

We do not sell personal data. We may share only the information necessary with providers that help us operate the service, such as Mirai for direct reservations, payment gateways, technology providers and professional advisers. We may also disclose data where required by a competent authority or legal obligation. Where an international transfer is relevant, we will seek appropriate safeguards under applicable law.

Retention and security

We retain data for as long as necessary for the purposes described and to meet legal, tax, accounting or claims-management obligations. We apply reasonable technical and organisational measures to reduce the risk of unauthorised access, loss, use or alteration, although no system can guarantee absolute security.

Your rights

Under Ecuador's Organic Law on Personal Data Protection and other applicable rules, you may request access, rectification and updating, erasure, objection, suspension of processing, portability, and review of automated decisions where applicable. You may also withdraw consent where consent is the basis for processing. If you believe a request has not been handled properly, you may contact the competent data protection authority.

Updates

We may update this policy if our services, providers or legal obligations change. The current version will always show its update date.