Privacy policy
Last updated: 12 November 2026
Version 2
Law No. 19,628 currently applies in Chile. Law No. 21,719 will replace it when it enters into force (1 December 2026, unless Congress postpones it). This policy is already designed to comply with it.
1. Who uses your data
Marlin Expediciones SpA, Chilean tax ID (RUT) 78.479.352-4, operator of Marlin Expediciones, based in the Valparaíso Region, Chile ("Marlin"). Legal representative: Hugo Ignacio Salas Ugarte. Address: Cerro El Plomo 5931, Las Condes, Santiago Metropolitan Region, Chile. Privacy contact: info@marlinexpediciones.com · WhatsApp +56 9 6248 7866.
2. What data we process and where it comes from
| Data | Examples | Where it comes from |
|---|---|---|
| Contact details of the person booking | Name, email, phone, language | The person booking |
| Booking | Date, expedition, number of passengers, how you heard about us | The person booking |
| Payment | Amount, date and status of the payment; if you pay by bank transfer, also the reference of the transaction, which the team records when confirming the transfer. We do not store your card details | Payment through Mercado Pago or PayPal; if you pay by bank transfer, your proof of payment and the team's record |
| Proof of bank transfer (only if you pay by bank transfer) | Image or PDF of the proof of payment that you upload; it may include your bank details | The person booking, who uploads it |
| Invoicing (only if you ask for it) | Company tax ID (RUT), legal name, line of business and address | The person who books |
| Passengers | Name, age, whether they can swim, fishing licence status | The person booking, who provides them |
| Emergency contact (a third party's data) | Name and phone number | The passenger when signing their form, or the person booking in the pre-trip form |
| Passenger registration and risk acceptance form | Name, ID or passport number, age, nationality, previous fishing or boating experience, handwritten signature (drawn on the tablet), date and time, version of the text, boxes ticked, email to send you your copy | The passenger |
| Representative of a minor | Name, ID or passport number, relationship, phone number | The representative |
| Health (sensitive data) | Allergies, current medication, diet, pregnancy, recent surgery, other relevant conditions and seasickness medication | The passenger themselves when signing their form (or their representative, if a minor) |
| Trip record | List of passengers, checklist, incidents (facts and actions, no diagnoses) | The skipper and crew |
| Image (optional) | Photos and videos of the trip | Only if you authorize it |
| Technical | IP address, browser and necessary cookies; anti-abuse signals | Your use of the website |
Health data. We ask for it on the Form because adventure-tourism rules require it. It is sensitive data: we process it only with your explicit consent (a separate box), only to look after your safety on the trip, and only Marlin's administration and the crew of your trip can see it. It is not sent by email or to the spreadsheet. We also do not make automated decisions or build profiles about you.
Proofs of bank transfer. We only ask for them if you choose to pay by bank transfer. We use them to verify that the money arrived and to confirm your booking; only Marlin's authorized team can see them, and they are kept in private storage. They are deleted after 24 months (see point 5).
For minors, their data is provided and consented to by their legal representative.
3. What we use it for and on what basis
| Purpose | Legal basis |
|---|---|
| Managing your booking, charging payment, sending confirmations, weather notices and reminders | Performance of the contract |
| Verifying payment by bank transfer using the proof of payment you upload, and confirming your booking | Performance of the contract |
| Issuing receipts and invoices and meeting tax and record-keeping obligations | Legal obligation |
| Recording and keeping each passenger's form and the trip log, which adventure-tourism rules require us to keep available for Sernatur | Legal obligation (Decree No. 19 of 2018, Ministry of Economy) |
| Receiving and using your health declaration to look after your safety on the trip | Your explicit consent (box D of the Form) and the legal obligation of the Form (Decree No. 19 of 2018) |
| Looking after your safety on the trip and calling your emergency contact only if there is an emergency | Legitimate interest in protecting passengers and, in an emergency, protecting life and physical integrity |
| Keeping evidence of what you accepted (Terms, Form) and being able to defend ourselves against a claim | Marlin's legitimate interest |
| Website security and prevention of fraud or abuse (for example, limits per IP address) | Legitimate interest |
| Sending you news and promotions | Your consent (separate, optional box) |
| Using your photos and videos on social media and the website | Your consent (separate, optional box, revocable) |
We do not sell your data or use it for purposes other than those stated.
4. Who we share it with
Providers that process data on Marlin's behalf (processors):
| Provider | Purpose | Where the data is hosted |
|---|---|---|
| Supabase | Database of bookings and forms, and private storage of proofs of bank transfer | Brazil (São Paulo) |
| Vercel | Website hosting | United States and its global network |
| Resend | Sending emails | United States |
| Cloudflare | Domain and bot protection (Turnstile) | Global network |
| Google (Workspace, Sheets, Calendar) | Company email and read-only copies for administration, without emergency or health data | United States and its global network |
Independent controllers (they use data under their own rules): Mercado Pago and PayPal (payments) and WhatsApp/Meta (when you write to us or we write to you on WhatsApp).
We also give data to authorities when the law requires it (for example, the Maritime Authority, Sernatur or the tax authority, SII) and to emergency services when necessary for your safety.
Transfers outside Chile: your data is stored and processed on servers of providers located in Brazil and the United States, among others. Chile has not yet declared which countries offer an adequate level of data protection, so we transfer your data under each provider's contractual safeguards: their data processing agreements, with standard contractual clauses, require them to apply security measures and to process the data only for the contracted service. If you want to know more, write to us.
5. How long we keep it
| Data | Period |
|---|---|
| Emergency contact entered in the pre-trip booking form | 30 days after the trip (if there was an incident, only what is strictly necessary to handle it) |
| Emergency contact on your signed form | 6 years, together with the signed form (adventure-tourism rules require keeping it for at least 2 years) |
| Acceptances of the Form and the Terms (with version and date) | 6 years from the trip, as evidence. For a minor, until 5 years after they turn 18 |
| Trip record (name, signature, checklist) | 6 years, because the Maritime Authority or Sernatur may request it |
| Health declaration | 24 months from the trip; afterwards the details are deleted (only the record that it was made remains). If there was an incident on the trip, it is kept for up to 6 years, like the record of that trip |
| Incidents | The time needed to handle them and legal deadlines |
| Booking, payments and tax documents | The periods set by tax and accounting law |
| Raw payment-gateway data | 24 months |
| Proofs of bank transfer that you upload on the site | 24 months from when you upload them; afterwards they are deleted. If the team records a proof on its own (for example, one you send us on WhatsApp), it is kept together with the payment record (see "Booking, payments and tax documents") |
| Uncompleted checkouts | Deleted within 4 days; if a payment was declined, 90 days as evidence in case of claims |
| Contact enquiries without a booking | 12 months from when we read them |
| Photos and videos you authorized | As long as you do not withdraw your authorization |
| Technical data | The period each provider sets for its technical logs |
6. Your rights
You can request access, rectification, erasure, objection, blocking and portability of your data, and withdraw your consents at any time, without retroactive effect. These requests are free of charge. Write to info@marlinexpediciones.com stating your request. We acknowledge receipt and reply within 30 calendar days, extendable once by another 30 days with a reasoned notice. If you ask us to temporarily block your data, we do it within 2 business days. If you are not satisfied, you may complain to the Personal Data Protection Agency once it is operational, and to the courts.
Some data cannot be erased early because the law requires us to keep it (for example, your signed form and tax documents): in that case we explain which data and until when.
If you are the person someone registered as an emergency contact and you want us to delete your data, write to us and we will delete it, except for what we must keep with the form by legal requirement.
7. Security
We use encrypted connections, two-step verification (password and a one-time code) on administration accounts, role-based access (the administration team and the crew of your trip see what they need for their work), a record of changes made in the system, and backups. The files with your signed forms and the proofs of bank transfer are kept in private storage, and access is limited to those who need them. If a breach occurs that may affect your data, we will notify you and the authority where appropriate, and we will record it together with the measures we took.
8. Cookies
We only use the cookies that are necessary for the site to work. We do not use advertising or measurement cookies. If that changes, we will say so here and in our Cookie policy.
9. Changes
We may update this policy and will publish the new version with its date. If the change affects how we use your image or your data, we will ask for your consent again.
10. Contact
Marlin Expediciones SpA · RUT 78.479.352-4 · Cerro El Plomo 5931, Las Condes, Santiago Metropolitan Region · info@marlinexpediciones.com · WhatsApp +56 9 6248 7866.
Contact
Write to us at info@marlinexpediciones.com or on WhatsApp at +56 9 6248 7866.