1. Data controller
The controller of your personal data is TOCA INVERSIONES Y SERVICIOS S.A.C ("MOYAS"), RUC 20450475719, registered at Jr.Huallaga 160 Interior 401, Lima, Perú. For any privacy questions, reach out to privacidad@moyas.pe.
2. Information we collect
- Contact details: name, email, and phone provided when you book or contact us.
- Reservation data: date, party size, preferences or allergies you share, and your visit history.
- Admin auth data: email and hashed credentials for internal panel access.
- Technical data: IP address, user agent, and logs necessary to secure the site and prevent abuse.
3. Purposes
- Manage and confirm your reservations.
- Communicate with you about your booking.
- Improve your experience (remember preferences and occasions).
- Send promotional messages only if you explicitly opted in at booking.
- Comply with legal, accounting, and tax obligations.
4. Third parties
We don't sell your data. We share it only with providers that help us operate, under confidentiality obligations:
- Supabase — database and authentication.
- Resend — transactional emails.
- Vercel — website hosting.
5. Retention
We keep your data while you remain an active guest and as long as required by law. You can ask us to delete it earlier, unless a legal obligation prevents us from doing so.
6. Your rights
You have the right to access, correct, delete, and object to the processing of your data, and to withdraw consent to marketing at any time. Email privacidad@moyas.pe.
7. Cookies
We use strictly necessary cookies only (admin session, language preference). No marketing or third-party tracking cookies.
8. Security
We apply reasonable technical and organizational measures: TLS in transit, admin access control, backups, and internal policies.
9. Changes
We may update this policy as our operations or applicable law change. The last-updated date appears at the top.
10. Contact
Questions? privacidad@moyas.pe.