Privacy policy

> Language notice: this English text is provided for the convenience of international guests. S&J operates in Colombia and the Spanish version, Colombian law and the version accepted with the booking remain the controlling legal references.

S&J Hospedajes Owner: Migda Rosa Torrecilla Meza NIT: 33220419 National Tourism Registry (RNT): 254341 WhatsApp: +57 312 500 2575 Email: [email protected]

Service locations:

• Apartamentos S & J: Calle 13 B # 5C-2, second floor, Santa Cruz de Mompox, Bolívar, Colombia.
• SYJ Apartment and Casa S&J: Carrera 3 # 3-92, Santa Cruz de Mompox, Bolívar, Colombia.

1. Information we may collect

For bookings we may collect name, surname, email, phone number, WhatsApp number, dates, number of guests, selected accommodation, special requests and estimated arrival time. Where required for tourist accommodation records or security, we may also request identity-document information, nationality and information about accompanying guests. Contact forms collect the information necessary to reply. Technical security data may be processed to prevent abuse and fraud.

2. Purposes

• Manage booking requests, confirmations, changes and stays.
• Communicate with guests.
• Meet accommodation-registration and public-authority requirements.
• Handle requests, complaints and claims.
• Protect the website and prevent fraud or abuse.
• Keep contractual, accounting and audit records where required.

S&J does not sell personal-data databases.

3. Sensitive data

S&J does not intentionally request sensitive data unless it is necessary and legally permitted. If a guest voluntarily enters health, disability or accessibility information in a special-request field, it will be used only to manage that need and should be limited to what is necessary.

4. Children

Personal data relating to minors is processed only when necessary for the stay and under the representation or authorisation of their parent or legal guardian, respecting the child's best interests.

5. Service providers

S&J may use providers for hosting, databases, email, messaging, security and analytics. They receive only the information required for their service and must operate under appropriate confidentiality and security arrangements.

6. Retention

Information is retained for as long as necessary for the guest relationship and for legal, tourism, accounting, contractual or dispute-related retention periods. When there is no longer a lawful purpose, data will be deleted or anonymised where appropriate.

7. Security

Reasonable technical and organisational measures include HTTPS in production, restricted admin access, protected passwords, permissions, audit records and backups.

8. Your rights

Under Colombian data-protection law, data subjects may request access, updating, correction, deletion or revocation where legally available. The primary contact channel is [email protected].