Privacy Policy

Last updated: October 16, 2026

This policy explains what personal data Peak Collection and its brands White Peak (ski travel) and Golden Peak (tailor-made travel) collect, how we use it, who we share it with and what rights you have. It applies to our website bypeakcollection.com, our forms, guides and newsletters, our Instagram and WhatsApp accounts, and the private links we send you (proposals, itineraries and the pre-trip form).

1. Who is responsible for your data

MZ Travel LLC, a company registered in Wyoming, United States, which operates the Peak Collection, White Peak and Golden Peak brands.
Address: 30 N Gould St Ste N, Sheridan, WY 82801, United States.
Privacy contact: hello@bypeakcollection.com

2. What data we collect

Data you give us when you contact us, request a proposal or download a guide: first and last name, email, phone or WhatsApp number, country and city of residence, language, how you heard about us (and, if applicable, who referred you) and the messages you send us.

Trip details: destination, dates, number of adults and children and their ages, approximate budget, preferences (for example ski level, travel style, interests or celebrations) and any comments you add.

Traveler details for bookings (only if you book a trip, through our pre-trip form): full names as shown on passports, date of birth, nationality, passport number and expiry date, phone, emergency contact, arrival time, frequent flyer programs, room preferences and, for ski trips, height, weight, shoe and helmet size, and ski or snowboard level.

Sensitive data: if you choose to tell us about allergies, dietary restrictions or health or mobility needs, we use this information only to organize your trip and to inform the suppliers who need it. It is always optional and, by providing it, you give us your explicit consent for that use.

Payment data: we do not store card numbers. Payments are made directly to suppliers or through secure payment platforms. We keep the details needed for invoicing (name, amounts, dates and payment method).

Email engagement data: whether you opened an email or clicked a link. We use it to understand what content interests you and to prioritize our replies.

Technical website data: IP address, browser and device type, pages visited and date and time of access, logged by our servers for security and to keep the site working. Our forms also use this data for anti-spam checks.

Instagram and WhatsApp: if you message us or comment on a post, we receive your username, your message and any details you choose to share.

3. How we use your data and our legal basis

To send you the guide or material you requested and, if you consented, emails with seasonal tips, travel ideas and news from our brands (basis: your consent, which you can withdraw at any time).
To answer your inquiries and prepare travel proposals (basis: steps taken at your request before entering into a contract).
To book and manage your trip with hotels, homes, airlines, local operators, equipment rentals and insurers, and to send you your itinerary and reminders before, during and after your trip (basis: performance of a contract).
To ask for your feedback after your trip and occasionally suggest a next trip (basis: our legitimate interest in keeping in touch with our clients; you can ask us to stop).
To invoice, keep accounting records and meet legal and tax obligations (basis: legal obligation).
To keep the website secure, prevent spam and improve our service (basis: legitimate interest).

We do not make decisions about you based solely on automated processing.

4. Private links: proposals, itineraries and the pre-trip form

We send your proposal, itinerary and pre-trip form through unique links that do not require a password. Anyone with the link can view them, so please do not publish them or share them with people who should not see them. These pages never show passport numbers, dates of birth, phone numbers or health details, and they are not indexed by search engines.

5. Who we share your data with

We do not sell your data or share it for third-party advertising. We only share it with:

Travel suppliers (hotels, property managers, airlines, local operators, equipment rentals and insurers) and the host agencies and travel-advisor booking platforms we book through, limited to what is needed for your booking.
Technology providers that work on our behalf: Brevo (email delivery and subscriber lists), Google Workspace (Gmail, Google Sheets and Google Drive, where we keep client and booking records), Cloudflare (hosting of our forms, proposals and itineraries), Hostinger (website hosting), Intuit QuickBooks (invoicing and accounting), Meta (Instagram and WhatsApp), ManyChat (automated Instagram replies) and Anthropic (artificial intelligence tools that help us draft replies and organize information, always reviewed by a member of our team).
Authorities, when required by law.

If we ever answer WhatsApp inquiries with a virtual assistant, it will always identify itself as such and you can ask to speak with a person.

6. International transfers

We are a U.S. company and work with suppliers in many countries, so your data may be stored or processed in the United States, the European Union and your destination country. We choose providers that apply appropriate safeguards, such as standard contractual clauses where applicable.

7. How long we keep your data

Guide and newsletter subscriptions: until you unsubscribe.
Inquiries that do not become a trip: up to 3 years, so we can help if you contact us again.
Client, booking and invoicing records: for the duration of our relationship and as long as accounting and tax rules require (generally 7 years).
Passport numbers, dates of birth and health details from the pre-trip form: up to 24 months after your trip ends, unless you ask us to delete them sooner or we need them for a future trip you book with us.

8. How we protect your data

We use encrypted connections, limit access to the team members who need the information to serve you (for example, our reservations team does not access financial records) and work with established providers that follow security standards. No system is 100% secure, but if an incident affects your data, we will notify you as required by law.

9. Your rights

You can ask us at any time to:

access your data and receive a copy;
correct or complete it;
delete it (except data we must keep by law);
restrict or object to its use, including for marketing emails;
withdraw your consent, without affecting anything done before.

Email us at hello@bypeakcollection.com. We reply within 30 days and may ask you to confirm your identity. To stop receiving emails, use the unsubscribe link at the bottom of each one.

If you live in the European Union or the United Kingdom, you can complain to your local data protection authority. If you live in Argentina, the Agencia de Acceso a la Información Pública is the supervisory authority under Law 25,326. If you live in California or another U.S. state with privacy laws, you have the right to know what data we hold, to ask us to delete or correct it, and not to be discriminated against for exercising your rights; we do not sell or share personal information as defined by those laws.

10. Cookies

Our website currently uses only the cookies it needs to work: security, fast page loading and your chosen language. We do not use third-party advertising or tracking cookies. If we add measurement or advertising tools in the future (for example, the Meta pixel), we will update this policy and ask for your consent where the law requires it. You can view and delete cookies in your browser settings. More details in our Cookie Policy.

11. Children

Our services are intended for adults aged 18 and over. We only process children’s data when a parent or responsible adult provides it to organize a family trip.

12. Third-party websites

Our website and proposals may include links to supplier websites, maps and social networks. We are not responsible for their privacy practices; please review their policies.

13. Changes to this policy

We may update this policy. We will publish the current version on this page with its update date and, if the change is significant, we will let you know by email.

Versión en español: Política de privacidad