Privacy policy
We only ask for what we need to answer your request. No data is sold and your request is never shared with a provider without your agreement.
Updated on October 4, 2026
Data controller
Terrenas Tours (terrenastours.com) is a platform operated by THERD SRL, RNC 133-63250-2, —. Contact: contact form · email: —.
Data we collect
- Tour request: your WhatsApp number (the only required item) and, if you wish, name, email, dates, number of participants and children's ages, language, accommodation area, budget and message. We do not need or ask for ID documents, bank details, health data or your exact address.
- Contact message, report, data request: the content of your message and a way to reply to you.
- Provider sign-up: business and contact person details, which are never published.
- Technical data: to limit abuse, a daily non-reversible fingerprint of the IP address and anti-spam signals. Visit statistics are counted in aggregate, with no cookie and no personal data.
Purposes and legal bases
Answering your request and arranging the activities you ask for (pre-contractual steps at your request), preventing spam and fraud (legitimate interest) and, only if you agree, sending you commercial offers (consent).
Sharing with providers
Your request reaches our team. It is only passed on to a tour provider with your agreement: the box ticked in the form, or agreement given on WhatsApp, which we record and date. Only the information needed for the activity is shared. You can withdraw your agreement at any time.
What we never do
We do not sell your data. We never send your phone number or email to advertising or analytics tools. We never put personal data in page addresses.
Retention
Requests with no activity are automatically anonymised after 12 months (adjustable). Contact messages and reports are deleted or anonymised within the same period. Backups, kept on the server with restricted access, are rotated over a cycle of a few weeks.
Cookies and analytics
No analytics or advertising tool is loaded without your explicit consent. Details on the Cookies and analytics page. To remember where your visit came from (campaign, referring site) during the session, we use the browser's session storage, which is cleared when you close the tab.
Your rights
You can request access to, correction or deletion of your data, object to receiving offers or withdraw a consent from the Exercise my rights page. We confirm your identity from the same WhatsApp number or email before acting.
Hosting and security
The site is hosted by —. Access to the administration is protected by a password and two-factor authentication, and every sensitive access is logged.