Guara Expeditions · Legal information

Privacy Policy

Last updated: 8 October 2026

1. Who we are

Guara Expeditions is operated by PME BV, Hertstraat 50, 8670 Koksijde, Belgium, Belgian enterprise number 1020.392.884, VAT BE1020.392.884. PME BV is the data controller for personal information handled through this website and expedition enquiries. Contact us at info@guaraexpeditions.com or +32 496 83 99 81.

2. What information we process

When you email us or enquire about an expedition, we may process your name, email address, phone number if provided, group size, proposed travel dates, language preferences and the information you include in your message. The website's current enquiry process opens your email application rather than sending form entries to a website database.

Our web-hosting and email providers may process technical data needed to deliver and protect the service, such as IP addresses, request times, device or browser information and security logs. Exact technical processing depends on the hosting and email providers used after publication.

For confirmed travel arrangements, we may separately request information needed to organise your trip. Any passport details, medical or dietary information, or other sensitive data will be requested only when necessary, with an appropriate legal basis and safeguards, and explained at the point of collection.

3. Why we process information and the legal bases

• Answering enquiries and preparing offers: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Organising a booked expedition: performance of a contract (Article 6(1)(b)).
• Accounting and legally required records: compliance with legal obligations (Article 6(1)(c)).
• Website security, preventing abuse and handling legitimate business disputes: legitimate interests, balanced against your rights (Article 6(1)(f)).
• Optional marketing: only where a valid legal basis applies, including consent where required; you can unsubscribe or object as applicable.

4. Who receives your information

Information may be accessed by authorised PME BV personnel and necessary service providers, such as website hosting, email, IT and accounting providers. Where you request or book an expedition, relevant details may be shared with local guides, accommodation providers, transport providers and other operational partners in Brazil to the extent necessary to arrange your travel. We do not sell personal information.

5. International transfers

Some expedition partners are based in Brazil, outside the European Economic Area. Before transferring personal information to them, we will assess the transfer and use a lawful GDPR transfer mechanism where required, such as an applicable adequacy decision or appropriate safeguards, or a narrowly applicable legal derogation. You may contact us for information about the mechanism relevant to your data.

6. How long we keep information

We keep personal information no longer than necessary for the purpose for which it was collected. Unsuccessful enquiries are reviewed and deleted or anonymised when no longer needed; records relating to bookings, invoices or disputes may be retained longer when required by law or justified by applicable limitation periods. Specific periods depend on the type of record and applicable Belgian requirements. You may ask about the period applying to your information.

7. Your GDPR rights

Subject to the conditions of the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time without affecting earlier lawful processing. Send requests to info@guaraexpeditions.com. We may need to verify your identity before fulfilling a request.

You can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.

8. Security

We use reasonable organisational and technical safeguards appropriate to the information processed, and require relevant service providers to protect personal data. No online transmission can be guaranteed completely secure.

9. Cookies and external websites

Read our Cookie Policy · Cookie settings for details of browser technologies. Our website links to Instagram; when you follow that link, Instagram's own privacy practices apply. The website currently references Google Fonts, which can result in a request to Google's servers; this should be reviewed before publication.

10. Updates

We may revise this policy if our website, booking processes, suppliers or legal obligations change. The current version will be available here with its updated date.