Privacy Policy
1. Who is responsible for your data
MatchLatin is operated by CB Media Limited ("we", "us", "our"), a company registered in the United Kingdom under company number 10114749, registered in Cardiff.
Our business address is Spaces Business Center, Elstow Road, Suite #A3, Bedford, MK42 8PL, United Kingdom.
CB Media Limited is the data controller responsible for personal data collected and processed through matchlatin.com and its related services.
For privacy-related questions or requests concerning your personal data, please contact us through the official contact form available on matchlatin.com.
2. What we collect
We collect and process personal information necessary to operate our platform, facilitate communication between members, organise tours, and improve our services.
Account and profile data: Your name, email address, date of birth, password (stored using secure cryptographic hashing), and any optional information you provide, such as your phone number, profile photographs, location, and personal preferences.
Tour applications: Information submitted through our tour application questionnaire, including relationship preferences, travel availability, marital status, and self-declarations concerning criminal convictions or other eligibility requirements.
Messages and translations: Messages exchanged through MatchLatin, associated metadata, and automatically generated translations between English and Spanish.
Bookings and payments: Information about tour reservations, selected packages, payment amounts, transaction references, payment status, and booking history. Payment card details are processed by authorised payment service providers. We do not store complete payment card numbers.
Technical and usage data: IP addresses, browser and device information, operating system, pages visited, interactions with our website, and cookie identifiers. Non-essential analytics technologies are used where appropriate consent has been obtained. Further information is available in our Cookie Policy.
Referral and affiliate data: Information about how you reached MatchLatin, including referral links, affiliate identifiers, and related attribution information.
Customer support communications: Information you provide when contacting our support or sales team, including inquiries, feedback, and correspondence relating to your account or bookings.
3. Why we use your information
We process personal data for the following purposes and on the following legal bases, where applicable:
Account management: To register users, authenticate accounts, maintain profiles, and provide platform functionality. Legal basis: performance of a contract.
Messaging and translation: To enable communication between members and provide automated language translation. Legal basis: performance of a contract.
Tour applications and participant safety: To review applications, assess eligibility, coordinate participation, prevent fraud, and promote the safety of members and tour participants. Legal basis: legitimate interests or legal obligations, as applicable. Information relating to criminal convictions is subject to additional legal requirements and safeguards.
Bookings and payments: To manage tour reservations, process payments, issue confirmations, and provide customer assistance. Legal basis: performance of a contract and compliance with legal obligations.
Service communications: To send account activation emails, booking confirmations, security notifications, and important service updates. Legal basis: performance of a contract or legitimate interests, as applicable.
Website analytics: To understand how visitors use MatchLatin, identify technical issues, and improve website performance and user experience. Legal basis: consent where required.
Affiliate attribution: To identify referrals, measure affiliate performance, and calculate commissions payable to authorised partners. Legal basis: legitimate interests, subject to applicable privacy and cookie requirements.
Legal compliance and security: To maintain required records, investigate misuse, protect our services, and comply with applicable laws. Legal basis: legal obligations and legitimate interests.
Where processing requires your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Who we share your information with
We share personal data only where reasonably necessary to operate MatchLatin, provide requested services, meet legal obligations, or protect our legitimate interests.
Recipients may include:
Technology and hosting providers: Companies providing website hosting, infrastructure, database management, security, and technical support.
Email and communication providers: Services used to deliver transactional emails, notifications, and customer communications.
Payment processors: Authorised providers responsible for securely processing payments and managing transactions.
Google services: Google Analytics for website analytics, Google Cloud Translation API for automated message translation, and Google Meet for scheduled online consultations or sales calls.
Local tour representatives: Our authorised team members and service partners in Colombia who assist with tour organisation, reservations, participant coordination, and on-site support.
Affiliate partners: Limited referral and booking information necessary to verify eligible commissions, subject to appropriate access restrictions.
Legal and regulatory authorities: Where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
We do not sell personal data to third parties for monetary compensation.
Because MatchLatin operates internationally, personal data may be transferred to or accessed from countries outside the United Kingdom, including Colombia and the United States. Where required, we implement appropriate international transfer safeguards, such as recognised contractual protections or other lawful transfer mechanisms.
5. How long we keep your information
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including providing our services, meeting legal obligations, resolving disputes, and enforcing agreements.
Account and profile information: Retained while your account remains active. Following account closure, personal information is deleted or anonymised when no longer required for legitimate business or legal purposes.
Messages: Retained while necessary to provide messaging functionality and manage account security, disputes, or reports of misconduct. Messages may be deleted or anonymised following account closure, subject to applicable retention requirements.
Tour applications: Retained for the period necessary to assess applications, administer participation, and address relevant safety or legal concerns.
Booking and payment records: Generally retained for up to six years after the relevant financial year or transaction, or longer where required by applicable tax, accounting, or legal obligations.
Analytics and technical information: Retained according to the settings of the relevant analytics or technical service and applicable legal requirements.
When personal information is no longer required, we take reasonable steps to securely delete or anonymise it.
6. Your privacy rights
Depending on your location and applicable data protection laws, including the UK GDPR, EU GDPR, and relevant United States state privacy laws, you may have the following rights:
Access: Request confirmation of whether we process your personal data and obtain a copy of that information.
Correction: Request correction of inaccurate or incomplete personal information.
Deletion: Request deletion of personal data where applicable legal conditions are met.
Data portability: Request a copy of certain personal information in a structured, commonly used, machine-readable format.
Restriction: Request that we restrict certain processing activities in circumstances provided by law.
Objection: Object to processing based on legitimate interests or to direct marketing.
Withdrawal of consent: Withdraw consent for processing activities that rely on consent, including certain analytics technologies.
To exercise your rights, please submit a request through the official contact form on matchlatin.com. We may need to verify your identity before processing your request.
We aim to respond within the time limits required by applicable law.
If you believe your personal data has been handled unlawfully, you may lodge a complaint with the relevant data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO), available at ico.org.uk.
7. Security
We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.
These measures include encrypted data transmission, secure password hashing, role-based access controls, and restrictions on access to personal information according to operational needs.
Although we take reasonable precautions, no internet-based service or electronic storage system can be guaranteed to be completely secure.
Users are encouraged to maintain strong passwords, protect their account credentials, and report suspected unauthorised access.
8. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, business practices, or applicable legal requirements.
Updates will be published on this page. Where changes materially affect how we process personal information, we will provide additional notice where required, including by email or through the platform.
We encourage users to review this Privacy Policy periodically.