Legal
Privacy Policy
Last updated: October 25, 2026
Millan Experiences, based in Cartagena de Indias, Colombia, respects your privacy. This policy explains what personal data we collect through www.millan-experiences.com and our communication channels, how we use it and how you can exercise your rights, in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013.
1. Data controller
Millan Experiences, Cartagena de Indias, Bolívar, Colombia. Email: millanexperiences@gmail.com · Phone and WhatsApp: +57 310 710 2651.
2. Data we collect
- Contact and quote requests: name, email, phone, country, travel dates, group size, services of interest and any details you share with us.
- Reservations and boutique orders: name, email, phone, delivery location (villa, boat or dock), reservation number and the products ordered.
- Reviews: the name, text, rating and photos you choose to publish.
- Payments: card and bank payments are processed by Wompi (Bancolombia). We do not receive or store your card details; we only receive the transaction status and reference.
- Browsing: anonymous, aggregated visit statistics (Vercel Analytics), a cookie that remembers your language and your boutique cart stored in your own browser.
3. How we use your data
We do not sell your personal data. We only share it with the providers needed to deliver the services you request.
- To answer your requests and prepare tailor-made proposals.
- To manage reservations, payments, deliveries and the services of your trip with our partners (villas, boats, chefs, transport).
- To send you transactional messages about your bookings and orders.
- To improve our website and services.
- To comply with legal, tax and accounting obligations.
4. Service providers
We rely on trusted providers that process data on our behalf: Sanity (content and request management), Resend (email delivery), Wompi (payment processing) and Vercel (hosting and anonymous analytics). Some of these providers store data outside Colombia, with security measures consistent with this policy.
5. Your rights
As a data subject you have the right to:
- Know, update and correct your personal data.
- Request proof of the authorization you gave us.
- Be informed about how your data has been used.
- Revoke your authorization and/or request the deletion of your data when there is no legal or contractual duty to keep it.
- File complaints with the Superintendence of Industry and Commerce (SIC).
6. How to exercise your rights
Write to millanexperiences@gmail.com with your full name, the request and a contact channel. We answer inquiries within ten (10) business days and complaints within fifteen (15) business days, as provided by Law 1581 of 2012.
7. Security and retention
We apply reasonable technical and organizational measures to protect your data, and keep it only for as long as needed for the purposes described or as required by law.
8. Changes to this policy
We may update this policy. The current version is always available on this page, with its date of last update.




