SECURITY MEASURES AND DUE DILIGENCE FOR ONLINE PURCHASING INTERFACE AND PAYMENT PROCESSING

SECURITY MEASURES AND DUE DILIGENCE FOR ONLINE PURCHASING INTERFACE AND PAYMENT PROCESSING

Peru Inka Trips Travel Agency

1. Objective

Peru Inka Trips adopts security measures and due diligence procedures designed to protect its clients’ information during the inquiry, booking, purchase, and payment process for tourism services offered through its digital channels.

These measures aim to reduce risks associated with unauthorized access, fraud, misuse of information, and unauthorized payment transactions.

2. Security of the Online Purchasing Interface

The platform or interface used by Peru Inka Trips to book tourism services must feature appropriate security mechanisms to protect information transmitted during the purchasing process.

Applicable measures include:

• Use of secure connections via HTTPS and SSL/TLS certificates.

• Protection of forms used for bookings and payments.

• Restriction of client information access strictly to authorized personnel.

• Regular updates of systems, applications, and components used on the platform.

• Implementation of strong passwords and access controls for administrative accounts.

• Monitoring of unusual or potentially fraudulent activities.

• Regular backups and implementation of measures to prevent data loss.

• Avoidance of unnecessary storage of sensitive payment card information.

3. Tools Used to Process Payments

Peru Inka Trips may use payment gateways, financial institutions, e-commerce platforms, or other specialized providers to process client payments.

When a payment is processed by a specialized third party, payment method data may be entered directly into the payment provider’s secure platform. This prevents Peru Inka Trips from accessing or storing complete bank card information when such data is not required to provide the service.

Payment service providers must maintain security measures suited to the nature of the operations they process.

Current tools or providers used:

• Account number: 28519014931167

• Interbank account number (CCI): 00228511901493116750

• Bank: Banco de Crédito del Perú (BCP)

• Country: Peru

• Currency: US Dollars (USD)

4. Due Diligence Regarding Suspicious Transactions

Peru Inka Trips may perform reasonable checks when a transaction presents unusual characteristics or red flags indicating potential fraud or unauthorized use of a payment method.

These checks may include:

• Confirmation of basic booking details.

• Verification of consistency between information provided by the client and the transaction made.

• Review of transactions that are unusual in amount, frequency, or characteristics.

• Request for additional information when reasonably necessary to validate a booking.

• Coordination with the payment provider or financial institution regarding a potentially fraudulent transaction.

• Rejection, suspension, or review of a transaction when reasonable indications of fraud exist.

5. Protection of Client Information

Peru Inka Trips will ensure that clients’ personal and booking information is used solely for purposes related to providing contracted services, customer support, booking management, billing, and compliance with legal obligations.

The agency will limit internal access to information based on the duties and responsibilities of authorized personnel.

6. Client Responsibility

Clients must make their payments exclusively through official channels communicated by Peru Inka Trips.

The agency strongly advises against sending complete bank card information, PINs, security codes, passwords, or access credentials via email, social media, messaging apps, or other unencrypted channels.

In case of any communication or payment request that raises doubts, the client must verify transaction details directly with Peru Inka Trips before proceeding with payment.

7. Fraud Prevention

Peru Inka Trips may implement controls aimed at detecting and preventing:

• Unauthorized use of payment cards or methods.

• Identity theft / Impersonation.

• Fraudulent bookings.

• Unauthorized access attempts to accounts or systems.

• Tampering with booking or payment information.

• Potentially fraudulent refund requests.

Where applicable, additional verification steps may be taken prior to confirming a booking or processing a refund.

8. Review of Security Measures

Security measures and due diligence procedures will be reviewed periodically, taking into account technological changes, emerging security risks, tools utilized by the agency, and recommendations from payment service providers.

Peru Inka Trips may update these measures whenever necessary to enhance the security of its online purchasing and payment processes.