Privacy, Cookies & Terms

Overview

Magic Waters Patagonia ("we," "us," "our") operates Magic Waters Patagonia Lodge, River of Dreams Basecamp, and Patagonia Baker Lodge. This page explains what information we collect through this website, how we use it, and the choices available to you — including specific rights for residents of the United States (including California), the European Union, the United Kingdom, Chile and other countries with a data protection law.

Who We Are

Magic Waters Patagonia, based in the Aysén Region of Chile, is the controller responsible for the personal data described on this page. You can reach us about your data through the privacy request form or at our email address.

Information We Collect

When you submit an inquiry, we collect the information you provide directly — name, email, phone number, preferred lodge, travel dates, and any details you share about your trip. When you browse the site, our own server counts page views without cookies or identifiers: the page viewed, the approximate location (country and region, derived by our network provider Cloudflare from your connection), the type of device, your browser language and the website that referred you. We do not store your IP address, and we do not count visits from browsers that send the Global Privacy Control signal.

When you submit a privacy request, we collect your name, email address, country of residence and the details of your request.

How We Use Information

We use the information you provide to respond to inquiries, plan and book trips, and communicate with you about your stay. Each use rests on a legal basis and has a retention period:

Responding to your inquiry and planning your trip:

necessary to take the steps you ask for before a booking (GDPR art. 6(1)(b)). Inquiries are stored in our secure system for up to 24 months so we can follow up on your trip; after that the personal details are deleted.

Understanding site usage:

the aggregated, cookie-free visit counts described above, based on our legitimate interest in maintaining and improving the site (GDPR art. 6(1)(f)). They contain nothing that identifies you and are kept as totals only.

Protecting the site and the forms:

connection data processed by Cloudflare to block attacks and automated abuse, based on our legitimate interest in security (GDPR art. 6(1)(f)).

Embedded Google Map:

loaded only with your consent (GDPR art. 6(1)(a)), which you can withdraw at any time from the cookie preferences.

Handling privacy requests:

necessary to comply with our legal obligations (GDPR art. 6(1)(c)). We keep a record of each request for 24 months after it is closed, then remove the personal details.

We do not sell your personal information, we do not use it for automated decisions with legal or similarly significant effects, and we do not use it for profiling.

Cookies

We use three categories of cookies, and you can choose which ones to allow using the cookie banner or preferences panel on this site:

Necessary:

required for the site to function securely (the security token of the contact form and your cookie choice); cannot be disabled.

Analytics:

used only with consent. Today this category only controls the embedded Google Map on the Getting There and Contact pages, which sets cookies from Google. Our own visit counts do not use cookies.

Marketing:

may be used to personalize offers on other sites, used only with consent. Not currently used.

Service Providers

Cloudflare delivers and protects this website; it processes connection data to block attacks, derives the approximate location used in our visit counts, and runs the Turnstile check that protects our contact forms. Google provides the optional map (only with your consent) and Search Console statistics about how our pages appear in Google results, which contain no personal data. Our hosting provider stores the website and its database on servers it operates on our behalf. Inquiry emails are sent through our own mail server.

International Transfers

We operate from Chile, so the data you send us is handled there. Cloudflare and Google are based in the United States and may process data in the countries where they operate; both are certified under the EU–US Data Privacy Framework and its UK extension, and we rely on that certification and on their standard contractual terms for transfers from the European Economic Area and the United Kingdom. Chile has not received an adequacy decision from the European Commission; for the data you send us directly, the transfer is necessary to take the steps you request before a booking (GDPR art. 49(1)(b)). You can ask us for more information about these safeguards through the privacy request form.

Security

The site is served only over HTTPS. Inquiry and privacy request details are encrypted in our database, access to them is limited to the administrators who handle bookings, and exports and deletions are logged. No method of transmission or storage is completely secure, so please do not send us sensitive information (such as health details) unless we ask for it to arrange your stay.

Your Rights and How to Exercise Them

Wherever you live, you can ask us to tell you what personal data we hold about you and to provide a copy, to correct it, to delete it, to restrict or block its use, to object to a particular use, to receive it in a portable format, and to withdraw any consent you gave. The easiest way is the privacy request form; you can also email us with the subject line "Privacy Request." Requests are free of charge. We confirm receipt, we may ask you to confirm your identity (usually by replying from the email address we have on file), and we reply within one month for residents of the European Economic Area and the United Kingdom, within 45 days for residents of the United States, within the period set by Chilean law for residents of Chile, and otherwise within the period set by your local law. If we need more time or cannot act on a request, we tell you why. An authorized agent may submit a request on your behalf with proof of authorization. We never treat you differently for exercising your rights.

Your Privacy Rights (US, including California)

Depending on your state of residence, you may have the right to know what personal information we hold about you, request its deletion, correct inaccuracies, and opt out of the "sale" or "sharing" of personal information (as those terms are defined under laws such as the California Consumer Privacy Act, as amended by the CPRA). We do not sell personal information for money, and we honor the Global Privacy Control browser signal as an opt-out. To exercise any of these rights, or to opt out of any sharing for cross-context behavioral advertising, use the privacy request form or contact us at our email address with the subject line "Privacy Request." We are a small business operating from Chile and we offer these rights to every visitor, whether or not a particular state law applies to us.

Your Privacy Rights (EU & UK — GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, or restrict the use of your personal data, to object to processing based on our legitimate interests, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal, under the General Data Protection Regulation and the UK GDPR. You may withdraw consent for optional cookies at any time via the preferences panel. You also have the right to lodge a complaint with the supervisory authority of your country of residence or, in the United Kingdom, with the Information Commissioner's Office. To exercise these rights, use the privacy request form or contact us at our email address.

Your Privacy Rights (Chile)

Magic Waters Patagonia is based in Chile. Under Law 19.628 you have the rights of access, rectification, cancellation and blocking of your personal data; from December 1, 2026, under Law 21.719, you also have the rights of suppression, opposition and portability, and you may lodge a complaint with the Agencia de Protección de Datos Personales. To exercise them, use the privacy request form or contact us at our email address; we reply within the period set by the applicable law.

Your Privacy Rights (Other Countries)

If you live elsewhere in Latin America or in another country with a data protection law — for example Argentina (Law 25.326), Brazil (LGPD) or Mexico (LFPDPPP) — you have equivalent rights of access, rectification, cancellation, opposition and, where the law provides, portability. Use the privacy request form or contact us at our email address, and we reply within the period set by your local law.

Children

This website is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us at our email address and we will delete it.

Accessibility

We are committed to making this website usable by the widest possible audience and aim to meet Web Content Accessibility Guidelines (WCAG) 2.1 Level AA. If you encounter any barrier to accessing content or using this site, please contact us at our email address and we will work to address it.

Terms & Booking Policy

Bookings are confirmed upon receipt of a deposit, with the balance due before arrival; specific deposit amounts, cancellation windows, and refund terms are provided at the time of booking and in your trip confirmation. All-inclusive packages cover lodging, meals, guided fishing, and ground transfers from Balmaceda Airport unless otherwise noted. Travel insurance is strongly recommended for all guests.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Contact Us

Questions about this policy or your data? Email us or call us.