Privacy Policy

Last updated: September 15, 2026

Who we are

River of Dreams Base Camp ("we", "us"), a fly fishing base camp operated from Coyhaique, Aysén Region, Chile, is the controller of the personal data collected through riverofdreamsbasecamp.com. Company registration details are available on request. For any privacy matter use our Privacy rights form or write to the email address shown in the footer. We have not appointed a data protection officer, nor a representative in the European Union or the United Kingdom.

This policy applies to visitors from anywhere in the world. Depending on where you live, one or more of these laws may apply: the EU General Data Protection Regulation (GDPR); the UK GDPR and Data Protection Act 2018; in the United States, the California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws — we offer the rights described below to every US resident, whether or not a particular law applies to us; in Chile, Law 19.628 until 30 November 2026 and Law 21.719 from 1 December 2026; in Argentina, Law 25.326 (our servers are located there); in Brazil, the LGPD (Law 13.709/2018); in Canada, PIPEDA. Visitors elsewhere in Latin America or the world have the same rights described below, whether or not a local law formally applies to us. Where laws differ, we apply the stricter standard.

What we collect and why

• Contact and booking forms. When you write to us we store your name, email address, phone number and country (if given), your message and, for booking enquiries, the package, dates and number of travellers you indicate, together with the country and region from which the message was sent, so that we can answer you and arrange your stay. Fields marked as required are needed to reply to you; without them we cannot handle your enquiry. Other fields are optional. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in answering enquiries. If you choose to tell us about dietary needs, allergies or a health condition relevant to your stay, we use that information only to prepare your trip and never for any other purpose or disclosure.
• Newsletter. Only if you tick the box and then confirm through the email we send you (double opt-in). We record the date, origin and country of your consent. You can unsubscribe with one click in every email. Legal basis: consent.
• Visit statistics. Our own server-side statistics count page views by country and region/state, referring site and device type. We do not use cookies or third-party analytics for this, we do not store your IP address, and we never record precise location. A daily-rotating hash allows us to count unique visitors without identifying anyone. Legal basis: legitimate interest in understanding how the site is used.
• WhatsApp link. When you open our WhatsApp chat we count the click (page and date only). The conversation itself takes place on WhatsApp under Meta's privacy policy.
• Privacy rights requests. When you use the Privacy rights form we store your name, email address, jurisdiction, the type of request, any details you give and, for representatives, the person concerned and the basis of authority, so that we can verify and answer the request. Legal basis: legal obligation.
• Security. The site, its forms and its contact links are protected against automated abuse with Cloudflare Turnstile (an invisible check that runs in your browser) and rate limits. Request metadata may be processed briefly for this purpose and no tracking profile is built. Legal basis: legitimate interest in keeping the site secure.

We do not use automated decision-making or profiling, and we do not sell or share personal information.

Who receives your data

We use the following service providers, which act on our instructions under written data-processing agreements:

• Our hosting provider (Argentina) — hosting of the site and its database.
• Cloudflare, Inc. (United States) — content delivery, security and bot protection.
• Our email delivery provider — delivery of the emails we send you.
• Vimeo and Google Maps — only after you press play or the map button; from that moment their own privacy policies apply.

Google Search Console provides us with aggregated search statistics and does not receive your personal data from us. Where a provider is located outside your country, the transfer relies on the safeguards recognised by the applicable law, such as standard contractual clauses or an adequacy decision. You can ask us for details of the safeguards that apply to each provider.

How long we keep data

Contact and booking messages: up to two years, so that we can follow up on a trip from one season to the next. Visit statistics: up to 400 days (about 13 months). Newsletter data: until you unsubscribe; unsubscribed addresses are removed within 90 days and unconfirmed sign-ups after 30 days. Privacy-rights requests: unconfirmed requests are deleted after 7 days; once a request is closed we remove your details and keep only the reference, dates and outcome for three years so that we can show how we handled it.

Your rights

Wherever you live you may ask us to: confirm whether we hold data about you and access it; correct or update it; delete it; receive a copy in a portable format; restrict or block its processing; object to processing based on our legitimate interest; and withdraw consent at any time (this does not affect processing carried out before withdrawal).

If you live in Chile you may also ask us to block your data temporarily while a correction, deletion or objection request is being resolved.

If you live in the United States you may also ask us not to sell or share your personal information and to limit the use of sensitive information: we do not sell or share personal information, and we use sensitive information only to arrange your stay. We honour Global Privacy Control signals; because we do not sell or share data, no further action is needed when we receive one. We will never treat you differently for exercising your rights.

An authorised agent may submit a request on your behalf; we will ask for proof of the authorisation and, for deletion requests, confirm directly with you.

How to exercise your rights. Use our Privacy rights form or write to the email address shown in the footer. We will send you a reference number and a confirmation link; for access, export and deletion requests we first verify that the email address is yours through that link. There is no charge.

Response times. We respond as soon as we can and, at the latest:

• European Union and United Kingdom: within one month, extendable by up to two further months for complex or numerous requests; we tell you the reason within the first month.
• United States: acknowledgement within 10 business days and response within 45 days, extendable once by a further 45 days where reasonably necessary; we tell you the reason within the first 45 days.
• Chile: until 30 November 2026, within 2 business days; from 1 December 2026, within 30 days (extendable once by a further 30 days) and within 2 business days for blocking requests.
• Argentina: within 5 business days for correction, update or deletion and within 10 days for access.
• Brazil: immediate confirmation that we process your data, and a full answer within 15 days.
• Elsewhere: within 30 days.

Complaints. If you are not satisfied you may complain to the data protection authority of your country: in the EU, your national supervisory authority; in the United Kingdom, the Information Commissioner's Office (ICO); in California, the California Privacy Protection Agency or the Attorney General; in Chile, until 30 November 2026 before the civil court of Coyhaique and from 1 December 2026 before the Agencia de Protección de Datos Personales; in Argentina, the Agencia de Acceso a la Información Pública (AAIP); in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD).

Children

The site is not directed at children and we do not knowingly collect data from anyone under 16 (13 in the United Kingdom).

Terms

Our Terms and Conditions describe the rules for using the site and for enquiries and bookings.

Changes

We review this page at least once a year and whenever our practices change, and show the date of the last revision above. Previous versions are available on request.