Section 1
What we collect, and why
We collect three kinds of information, and each exists for a reason we can name.
Contact details. Name, email, phone number and time zone, given when you apply or write to us. Used to review your application, schedule your calls, and arrange your transfer from Cusco. Nothing else.
Your application. Thirty-four questions covering medication, cardiac and psychiatric history, family history, and what you are hoping for. This is the information that lets a physician decide whether we can hold you safely. It is the most sensitive thing you give us, and section 2 is entirely about it.
Payment records. Deposits and balances are processed by our payment provider. We see the confirmation, not your card number, and we keep invoices for as long as Peruvian tax law requires.
Your medical information
Your medical file is read by exactly two people: the licensed physician who reviews your application, and the integration lead who stays with you for the year. It is stored encrypted, separately from your contact details, and it is never in the same system as our marketing.
The maestros never see it. They are told what they need to hold a safe ceremony: never a diagnosis, a prescription, or anything you wrote on the form.
If your application does not proceed, the medical file is destroyed within 30 days of the decision, and you receive written confirmation that it was. The reason we gave you in writing is kept; the file behind it is not.
We are not a US healthcare provider and this file is not a medical record under HIPAA. We treat it with the same discipline anyway, because the alternative is unacceptable to us.
Section 3
Who can see what
The physician
Your full application and medical file.
Your integration lead
Your full application and medical file.
The maestros
Your first name and what is needed to hold ceremony safely. Never the file.
House staff
Your name, dietary requirements and arrival time.
The one exception: in a medical emergency we share what treating clinicians need, at the clinic in Calca or the hospital in Cusco, and we tell you afterwards exactly what was shared.
Section 4
How long we keep it
Declined or withdrawn applications
30 days
Medical file, if you attend
Deleted after your integration year
Contact details and correspondence
3 years, or on request
Invoices and payment records
As Peruvian tax law requires
If you stay in touch through the integration year and want your file kept longer, tell your integration lead and we keep it until you say otherwise. Some guests return.
Section 5
What we never do
Sell, rent or trade your information. To anyone, for anything.
Use your medical answers for marketing, ever. The two systems do not touch.
Confirm to a third party that you applied, attended, or were declined, including family, unless you named them as your emergency contact.
Photograph you, quote you, or use your story without written permission asked after the retreat, never during it.
Send follow-up you did not ask for. One application, one decision, no drip campaign.
Section 6
Cookies and analytics
This site uses privacy-respecting analytics that count visits without identifying visitors, and the cookies required to keep a form working while you fill it in. There is no advertising pixel, no retargeting, and no social media tracker on any page, including this one.
We do not buy ads that follow you around the internet. Someone researching ayahuasca has not necessarily told anyone, and their browser should not tell anyone either.
Section 7
Where your data lives
We operate in Peru and most of our guests apply from the United States, so your information crosses a border the moment you submit the form. It is stored with providers in the US and the EU under standard contractual protections, processed under Peru’s Personal Data Protection Law (Law 29733), and handled to the standards of the CCPA and GDPR where they apply to you.
Plainly: the law that protects you depends on where you live, and we hold ourselves to the strictest of the three rather than the nearest.
Section 8
Your rights
You can ask, at any time, for a copy of everything we hold on you, a correction to anything wrong in it, or its deletion. Requests are answered within 14 days, by a person, and deletion requests are honoured except where tax law obliges us to keep an invoice.
You do not need to cite a statute or fill in a form. An email saying “delete my file” is a complete request.
Section 9
Questions and requests
Write to support@eclmedia.agency and a person answers within 14 days. If the question concerns your medical file, it is answered by the physician or your integration lead, the only two people who can open it.
This policy changes only when our practices do. When it does, the effective date above changes with it, and guests with an open application are told directly.