Privacy Policy

Hosteo S.A.C.

Last updated: June 2, 2026

This Privacy Policy explains how Hosteo S.A.C., identified with RUC No. 20615185150, with legal address at Parque Armendáriz 159, Lima, Peru (“Hosteo”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data in connection with our website, direct bookings, guest communications, property management services, and related operations.

This Privacy Policy applies to personal data collected through hosteo.pe, direct bookings, WhatsApp, email, phone calls, payment links, guest registration forms, check-in processes, property access procedures, customer service channels, stay-related communications, and any other digital or physical channel operated by Hosteo S.A.C.

This Privacy Policy applies to website visitors, guests, prospective guests, registered guests, companions, visitors, property owners, service providers, and any person who interacts with Hosteo in connection with our short-term rental and property management services.

For privacy and personal data matters, you may contact us at:

Email: hola@hosteo.pe

Customer service: bookings@hosteo.pe

WhatsApp: +51 903 191 706

Website: hosteo.pe

By using our website, making a booking, submitting personal information, sending identification documents, accepting a payment link, completing guest registration, checking in, or using one of our managed properties, you acknowledge that you have read and understood this Privacy Policy.

1. Who Is Responsible for Your Personal Data

Hosteo S.A.C. is responsible for the personal data it collects and processes in connection with direct bookings, guest management, property operations, customer service, payment coordination, security, legal compliance, and related services.

For purposes of applicable personal data protection regulations, Hosteo may act as the party responsible for determining the purposes and means of processing personal data.

Some third-party service providers may process personal data on behalf of Hosteo, including payment processors, property management systems, cloud storage providers, messaging tools, email providers, website providers, analytics tools, security providers, building administrations, and operational vendors.

2. Personal Data We Collect

Hosteo may collect the following categories of personal data:

a. Identification Data

Full name.

Nationality.

Date of birth.

Sex or gender, when required for legal or immigration registration.

DNI, passport, foreign resident card, national ID, or other identification document.

Document number.

Copy, photo, or scan of identification documents.

Signature, when required for registration, authorization, contracts, or check-in.

b. Contact Data

Email address.

Phone number.

WhatsApp number.

Address or country of residence.

Emergency contact, when provided or required.

c. Booking and Stay Data

Property booked.

Booking dates.

Number of guests.

Guest names and identification details.

Check-in and check-out information.

Special requests.

Arrival time.

Access instructions.

Booking history.

Cancellation, refund, or modification requests.

Guest preferences related to the stay.

d. Payment and Guarantee Data

Payment status.

Payment method.

Billing details.

Transaction references.

Currency.

Amounts paid.

Refunds.

Security deposit or credit card hold information.

Last four digits of card, card brand, authorization status, or similar limited payment information, when provided by the payment processor.

Hosteo does not intend to store full credit card numbers or card security codes. Card payments and credit card holds should be processed through authorized payment processors or gateways.

e. Communications Data

Emails.

WhatsApp messages.

SMS.

Call records or call notes.

Customer service requests.

Complaints and claims.

Reviews, comments, or feedback.

Incident reports.

f. Security and Incident Data

Check-in verification.

Building registration records.

Access logs, where available.

Photos or videos related to property condition, damages, missing items, cleaning reports, or incidents.

Reports from building administration, security staff, cleaning staff, maintenance staff, owners, neighbors, or authorities.

Information related to rule violations, damages, fines, disturbances, unauthorized guests, unauthorized pets, smoking, parties, or illegal activity.

g. Website and Technical Data

When you use our website, we may collect:

IP address.

Browser type.

Internet Service Provider.

Device type.

Operating system.

Pages visited.

Date and time of access.

Referring and exit pages.

Number of clicks.

Cookies and similar tracking technologies.

Approximate location derived from technical data.

Interaction with booking forms, buttons, pages, or advertisements.

h. Marketing Data

If you interact with marketing campaigns or give consent to receive commercial communications, we may process:

Marketing preferences.

Subscription status.

Campaign interactions.

Email opens and clicks.

Social media interactions.

Advertising audience data.

3. Sensitive Personal Data

Hosteo does not intentionally request sensitive personal data unless it is necessary for a specific lawful purpose, emergency, legal obligation, security matter, or guest request.

Sensitive personal data may include health-related information, disability-related needs, accessibility requirements, biometric information contained in identification documents, or other information that may be considered sensitive under applicable law.

If you voluntarily provide sensitive information, we will use it only for the purpose for which it was provided, such as accommodating a reasonable request, addressing an emergency, complying with a legal obligation, or protecting your safety.

4. How We Collect Personal Data

We may collect personal data directly from you when you:

Visit our website.

Make a direct booking.

Contact us by WhatsApp, email, phone, social media, or website form.

Submit a guest registration form.

Send identification documents.

Complete a payment or credit card hold.

Request support.

Submit a complaint or claim.

Check in or stay at one of our managed properties.

Provide feedback, reviews, or comments.

Subscribe to marketing communications.

We may also receive personal data from:

Other guests included in the booking.

The person who made the booking.

Property owners.

Building administrations.

Building reception or security staff.

Cleaning and maintenance providers.

Payment processors.

Booking platforms or channel managers.

Property management systems.

Public authorities, when applicable.

Third-party service providers used in our operations.

The main guest is responsible for ensuring that any personal data provided about other guests, companions, visitors, minors, or third parties is accurate and has been shared with appropriate authorization when required.

5. Why We Use Personal Data

Hosteo may use personal data for the following purposes:

a. Booking Management

Confirming bookings.

Managing reservations.

Communicating with guests.

Coordinating check-in and check-out.

Sending access instructions.

Managing cancellations, changes, refunds, or extensions.

Coordinating cleaning and maintenance.

Providing customer support.

b. Guest Identification and Security

Verifying guest identity.

Preventing fraud.

Preventing unauthorized access.

Protecting properties, owners, neighbors, building residents, staff, and guests.

Enforcing house rules and building rules.

Investigating damages, incidents, complaints, or rule violations.

Managing security deposits or credit card holds.

c. Legal and Regulatory Compliance

Complying with Peruvian laws and regulations.

Issuing receipts, invoices, or tax documents.

Maintaining accounting and tax records.

Responding to lawful requests from authorities.

Registering foreign guests or tenants when required by Peruvian immigration rules.

Managing consumer complaints and the Libro de Reclamaciones.

d. Payment and Guarantee Processing

Processing payments.

Confirming payment status.

Managing refunds.

Managing security deposits or credit card holds.

Charging documented damages, fines, missing items, excessive cleaning, unauthorized guests, unauthorized pets, smoking, or late check-out fees.

Preventing chargebacks, fraud, or payment disputes.

e. Property Operations

Coordinating with property owners.

Coordinating with building administrations.

Coordinating cleaning, laundry, maintenance, locksmiths, technicians, or emergency providers.

Managing inventories, damage reports, and property inspections.

Improving property quality and guest experience.

f. Customer Service and Dispute Resolution

Responding to questions.

Handling complaints and claims.

Managing incidents.

Resolving disputes.

Defending Hosteo, property owners, staff, or third parties in legal, administrative, or contractual matters.

g. Marketing and Service Improvement

Sending promotional communications, when permitted.

Offering special rates or returning guest offers.

Improving our website, properties, services, operations, and guest experience.

Measuring the performance of marketing campaigns.

Understanding demand, occupancy, guest preferences, and booking behavior.

Commercial communications may be subject to separate consent or opt-out options where required by applicable law.

6. Legal Basis for Processing

Hosteo processes personal data when necessary for one or more of the following reasons:

To manage and perform a booking or accommodation service requested by the guest.

To comply with legal, tax, accounting, immigration, consumer protection, or regulatory obligations.

To protect the security of guests, properties, owners, neighbors, buildings, Hosteo, and third parties.

To prevent fraud, unauthorized access, damages, or illegal activity.

To handle claims, complaints, chargebacks, disputes, or legal matters.

Based on the guest’s consent, when consent is legally required.

Based on Hosteo’s legitimate operational interest, where permitted by applicable law and not overridden by the rights of the data subject.

7. Sharing Personal Data

Hosteo may share personal data with third parties when necessary for the purposes described in this Privacy Policy.

These third parties may include:

a. Property Owners

We may share booking, guest, payment, incident, damage, or stay-related information with the owner of the property when necessary for property management, reporting, security, damage claims, accounting, or operational reasons.

b. Building Administrations and Security Staff

We may share guest names, identification details, dates of stay, vehicle information, visitor information, and access-related data with building reception, security staff, or administration when required by building rules, access control, security, or incident management.

c. Payment Processors and Banks

We may share payment-related data with payment gateways, banks, card processors, fraud prevention tools, and financial service providers to process payments, refunds, card holds, chargebacks, or security deposits.

d. Technology and Operations Providers

We may use third-party systems and providers for:

Property management.

Channel management.

Payment processing.

Website hosting.

Cloud storage.

Email.

WhatsApp or messaging.

Customer support.

Digital forms.

Electronic signatures.

Analytics.

Advertising.

Automation.

Accounting.

Security.

e. Cleaning, Maintenance, and Emergency Providers

We may share limited information with cleaning staff, laundry providers, maintenance workers, locksmiths, technicians, contractors, or emergency service providers when necessary to perform the service, resolve incidents, access the property, or protect safety.

f. Public Authorities

We may share personal data with public authorities, courts, police, immigration authorities, tax authorities, consumer protection authorities, municipalities, or regulators when required by law, legal process, official request, investigation, or legitimate need to protect rights and safety.

g. Professional Advisors

We may share information with lawyers, accountants, auditors, insurance advisors, consultants, or other professional advisors when necessary for compliance, claims, legal defense, accounting, insurance, or business operations.

8. International Transfers

Some of the systems and providers used by Hosteo may store or process data outside Peru. This may happen when we use international cloud services, email providers, payment processors, messaging platforms, property management systems, analytics tools, advertising platforms, or customer support tools.

By using our services and providing personal data, you acknowledge that your personal data may be transferred, stored, or processed in countries outside Peru, subject to applicable legal requirements and reasonable security measures.

Hosteo will take reasonable steps to ensure that third-party providers process personal data in a manner consistent with this Privacy Policy and applicable personal data protection rules.

9. Data Retention

Hosteo will retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

Managing current and past bookings.

Providing customer support.

Complying with tax, accounting, immigration, consumer protection, legal, and regulatory obligations.

Handling complaints, disputes, claims, chargebacks, refunds, or damage reports.

Preventing fraud or unauthorized activity.

Protecting Hosteo, property owners, guests, buildings, staff, and third parties.

Maintaining operational records.

Identification documents and guest registration data may be retained for the period necessary to comply with legal, immigration, security, accounting, tax, and dispute resolution obligations.

When personal data is no longer necessary, Hosteo will delete, anonymize, archive, or restrict it according to applicable law and operational feasibility.

10. Security Measures

Hosteo applies reasonable technical, organizational, and legal measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, destruction, fraud, or unlawful processing.

These measures may include:

Restricted access to guest information.

Password-protected systems.

Use of third-party providers with security controls.

Internal access controls.

Operational procedures for handling identification documents.

Limiting data access to people who need it for operational, legal, or service purposes.

Documentation of incidents, damages, and security-related matters.

Review and deletion of unnecessary data when appropriate.

However, no website, payment system, messaging platform, email service, or digital storage system can be guaranteed to be 100% secure. Guests should avoid sending unnecessary sensitive information and should use secure communication channels whenever possible.

11. Log Files

Like many websites, Hosteo may use log files and similar technical records when users visit hosteo.pe or interact with our digital channels.

These log files may collect information such as:

IP address.

Browser type.

Internet Service Provider.

Device type.

Operating system.

Date and time of access.

Referring and exit pages.

Pages visited.

Number of clicks.

Approximate technical location.

This information is used to operate the website, analyze trends, improve performance, maintain security, prevent fraud, understand user behavior, and improve our services.

Log file information is generally technical in nature and is not intended to directly identify a person on its own. However, it may be combined with other information when necessary for security, fraud prevention, legal compliance, dispute resolution, or operational purposes.

12. Cookies and Similar Technologies

Hosteo uses cookies, pixels, tags, web beacons, analytics tools, and similar technologies on hosteo.pe and related digital channels.

These technologies may be used to:

Operate the website.

Remember user preferences.

Improve website performance.

Understand how visitors use the website.

Analyze traffic and booking behavior.

Improve the guest experience.

Measure advertising and marketing campaigns.

Prevent fraud and improve security.

Cookies may store information such as visitor preferences, browser type, visited pages, session data, and interactions with the website.

Hosteo may use the following types of cookies:

Essential Cookies

These cookies are necessary for the website to function correctly, including booking forms, security, navigation, and basic website features.

Analytics Cookies

These cookies help us understand how visitors use the website, which pages are visited, and how we can improve the website and booking experience.

Marketing Cookies

These cookies may be used to measure advertising campaigns, retarget website visitors, and show relevant offers, when legally permitted.

Users may disable cookies through their browser settings. However, disabling cookies may affect website functionality, booking forms, payment flow, or user experience.

When required by applicable law, Hosteo may request consent for non-essential cookies through a cookie banner or similar mechanism.

13. Marketing Communications

Hosteo may send commercial communications, offers, updates, or promotions when the guest has provided consent, has an existing relationship with Hosteo, or when permitted by applicable law.

Guests may opt out of marketing communications by following the unsubscribe instructions in the message or by contacting:

hola@hosteo.pe

Operational communications related to an active or past booking, payment, check-in, check-out, security, damages, refunds, legal obligations, or customer service are not considered marketing communications and may still be sent when necessary.

14. Data Subject Rights

Under applicable personal data protection rules, you may have the right to request:

Access to your personal data.

Information about how your data is processed.

Rectification of inaccurate or incomplete data.

Cancellation or deletion of data, when legally applicable.

Opposition to certain processing activities, when legally applicable.

Revocation of consent, when processing is based on consent.

Other rights recognized by applicable law.

To exercise your rights, please contact:

Hosteo S.A.C.

Email: hola@hosteo.pe

Subject: Personal Data Request

Your request should include:

Full name.

Identification document.

Contact email.

Clear description of the right you wish to exercise.

Documents or information needed to verify your identity and process the request.

Hosteo may deny or limit a request when permitted by law, including when the data is necessary for legal, tax, accounting, immigration, contractual, security, fraud prevention, dispute resolution, or legal defense purposes.

15. GDPR Notice for Users in the European Economic Area or United Kingdom

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction where the General Data Protection Regulation or similar data protection rules apply, you may have additional rights regarding your personal data.

Subject to applicable conditions and limitations, these rights may include:

The right to access your personal data.

The right to request correction of inaccurate or incomplete data.

The right to request deletion of your personal data.

The right to request restriction of processing.

The right to object to certain processing activities.

The right to data portability.

The right to withdraw consent when processing is based on consent.

The right to lodge a complaint with a competent data protection authority.

To exercise these rights, please contact us at:

hola@hosteo.pe

Hosteo may need to verify your identity before processing your request.

Some requests may be denied or limited when Hosteo is legally required or reasonably entitled to retain information for booking management, tax records, immigration registration, accounting, fraud prevention, chargebacks, legal claims, damage claims, security, or dispute resolution.

16. CCPA Notice for California Residents

If you are a resident of California and the California Consumer Privacy Act or similar California privacy laws apply to your personal data, you may have certain rights, subject to legal conditions and limitations.

These rights may include:

The right to know what categories of personal information we collect.

The right to know the purposes for which we use personal information.

The right to know the categories of third parties with whom we share personal information.

The right to request access to specific personal information collected about you.

The right to request deletion of personal information, subject to legal exceptions.

The right to opt out of the sale or sharing of personal information, where applicable.

The right not to be discriminated against for exercising privacy rights.

Hosteo does not sell personal information in the traditional sense. However, some analytics or advertising tools may involve data sharing that could be regulated under California privacy laws.

To make a privacy request, please contact:

hola@hosteo.pe

Subject: California Privacy Request

Hosteo may need to verify your identity before responding to your request.

17. Children and Minors

Hosteo’s services are intended to be booked by adults only.

The main guest must be at least 18 years old and is responsible for any minors included in the booking.

Hosteo does not knowingly allow minors to make direct bookings.

If personal data of minors is provided as part of a booking, it must be provided by a parent, legal guardian, or responsible adult. Such information will only be used for purposes related to the stay, safety, legal compliance, guest registration, emergency management, or property access.

If you believe that a minor has provided personal data to Hosteo without proper authorization, please contact us at:

hola@hosteo.pe

We will review the situation and take reasonable steps to delete or restrict the information when appropriate and legally possible.

18. Third-Party Websites and Platforms

Hosteo’s website or communications may contain links to third-party websites, payment platforms, maps, booking tools, social media pages, review platforms, or external services.

Hosteo is not responsible for the privacy practices, security, content, or policies of third-party websites or platforms.

Guests should review the privacy policies of any third-party service they use.

19. Libro de Reclamaciones and Complaints

For privacy-related questions, please contact:

hola@hosteo.pe

For booking-related complaints, guests may contact:

bookings@hosteo.pe

WhatsApp: +51 903 191 706

Hosteo will make available its Libro de Reclamaciones / Complaints Book in accordance with applicable Peruvian consumer protection rules.

The Libro de Reclamaciones will be available through the visible “Libro de Reclamaciones” link displayed on hosteo.pe.

20. Updates to This Privacy Policy

Hosteo may update this Privacy Policy from time to time to reflect changes in our services, website, legal obligations, operational practices, technologies, or regulatory requirements.

The updated version will be published on hosteo.pe with the corresponding “Last updated” date.

Continued use of our website or services after publication of an updated Privacy Policy means that the user acknowledges the updated version.

21. Contact

For questions, requests, or concerns regarding this Privacy Policy or the processing of personal data, please contact:

Hosteo S.A.C.

RUC: 20615185150

Address: Parque Armendáriz 159, Lima, Peru

Privacy email: hola@hosteo.pe

Customer service email: bookings@hosteo.pe

WhatsApp: +51 903 191 706

Website: hosteo.pe