MOYAS
ES
EN
Book
Privacy policy

Your data is safe with us

Last updated: June 1, 2026

At MOYAS we respect your privacy and comply with Peru's Personal Data Protection Law (Law 29733). This document explains what information we collect, how we use it, and what rights you have over it.

1. Data controller

The controller of your personal data is TOCA INVERSIONES Y SERVICIOS S.A.C. ("MOYAS"), RUC 20450475719, registered at Jr. Huallaga 160, Int. 401, Lima, Perú. For any privacy questions, reach out to privacidad@moyas.pe.

2. Information we collect

  • Contact details: name, email, and phone provided when you book or contact us.
  • Reservation data: date, party size, preferences or allergies you share, and your visit history.
  • Admin auth data: email and hashed credentials for internal panel access.
  • Technical data: IP address, user agent, and logs necessary to secure the site and prevent abuse.

3. Purposes

  • Manage and confirm your reservations.
  • Communicate with you about your booking.
  • Improve your experience (remember preferences and occasions).
  • Send promotional messages only if you explicitly opted in at booking.
  • Comply with legal, accounting, and tax obligations.

4. Third parties

We don't sell your data. We share it only with providers that help us operate, under confidentiality obligations:

  • Supabase — database and authentication.
  • Resend — transactional emails.
  • Vercel — website hosting and performance metrics (Speed Insights, cookieless).
  • Google Analytics — site usage statistics, only if you accept analytics cookies (see the Cookies section).

5. Retention

We keep your data while you remain an active guest and as long as required by law. You can ask us to delete it earlier, unless a legal obligation prevents us from doing so.

6. Your rights

You have the right to access, correct, delete, and object to the processing of your data, and to withdraw consent to marketing at any time. Email privacidad@moyas.pe.

7. Cookies and analytics

We use two kinds of cookies:

  • Strictly necessary: make the site work (admin session and language preference). They can't be disabled and don't require consent.
  • Analytics (Google Analytics 4): help us understand how the site is used so we can improve it. They load only if you accept them in the cookie notice. Until then, Google Analytics runs in a restricted, cookieless mode with your IP anonymized (Consent Mode v2).

You can change your choice anytime: decline in the cookie notice, or clear moyas.pe cookies in your browser to be asked again. We also measure site performance with Vercel Speed Insights, which uses no cookies and doesn't identify you.

8. Security

We apply reasonable technical and organizational measures: TLS in transit, admin access control, backups, and internal policies.

9. Changes

We may update this policy as our operations or applicable law change. The last-updated date appears at the top.

10. Contact

Questions? privacidad@moyas.pe.