Iquitos, Loreto · Version 1.0 · 6 August 2026

Privacy Policy

You are about to send us a medication list, a psychiatric history and a cardiac history. So this page is written as answers rather than clauses, and it starts with the four questions people actually have.

The four answers most people want

Who reads my medical history?

Two people. Never the maestros.

The reviewing physician, who makes each medical decision, and your integration lead, who reads your file before your screening call and stays with you for a year afterwards. Nobody else on the team — not the founder, not the kitchen, not the boat crew, not administrative staff. The maestros are told what they need to work safely with a guest and nothing more; they never see medication lists or diagnoses.

How long do you keep it?

Twelve months, unless you attend.

Enquiries and declined applications are deleted after twelve months. If you attend a retreat we hold your screening record for five years from your last integration call, which reflects the duty of care around a medical assessment and a year of aftercare. Financial records are kept as long as Peruvian tax law requires, separately from anything medical.

Will you email me forever?

No. There is no list.

We do not run a newsletter, a drip sequence or a remarketing audience, and we never sell, rent or trade your details. You will hear from us once with an answer to what you asked. If you go quiet, we assume the answer is no and leave you alone.

How do I get it deleted?

Ask in one line.

Email support@eclmedia.agency and say so. We confirm within 30 days and delete everything we are not legally required to keep — and where something must be retained we will name it specifically rather than using the exception as a blanket refusal. You do not have to give a reason, and asking never affects an application in progress.

Who can see what

The access list, role by role


This is the section most people are actually here for, so it is the most specific one. These limits are enforced technically, not just written down.

Health information is a special category of data. Our basis for holding it is your explicit consent, given when you apply, together with our own duty of care in deciding whether to accept you.
RoleMedical historyContact & logistics
Reviewing physicianFull access — makes every medical decisionYes
Your integration leadFull access — before your call and for the year afterYes
The maestrosNever — told only what is needed to work safelyNo
Founder and admin teamNo accessNames and dates only
Kitchen and property teamNo accessDietary needs only
A treating clinician, in an emergencyWhat they need to help youEmergency contact
A lawful orderAs legally required — and we tell you unless prohibitedAs required

And what we deliberately never record

×

Anything said in ceremonyNothing is recorded, transcribed or written down, by anyone, at any point.

×

Why you declined a medicineSkip Kambo or Bufo and no note is kept about the reason.

×

Photographs of guestsUnless you asked for them and agreed in writing.

×

Behavioural advertising dataThere are no advertising or remarketing pixels on this site.

Retention

How long each situation is held


12 mo

Enquired, did not apply

So a later enquiry has context. Then deleted.

12 mo

Applied, declined

So a future application is read against the first and the same ground is not re-covered.

12 mo

Applied, withdrew

In case you return to a later week. Deleted immediately on request.

5 yrs

Attended a retreat

From your last integration call. Duty of care around a medical screening record.

Statutory

Payment records

As Peruvian tax law requires. Held separately from anything medical.

You can ask us to delete sooner at any point and we will, other than records we are legally required to retain — which we will identify to you specifically.

Everything else, briefly

The rest of the detail


Who we are

Iquitos Ayahuasca Retreats operates a twelve guest retreat centre ninety minutes upriver from Iquitos, in Loreto, Peru. We are the data controller: we decide what is collected and why, and we are accountable for it. This policy covers this website and the application process behind it, not the sites of our sister houses in Peru, Cusco, Pisac or Costa Rica, which publish their own.

What we collect

Almost everything we hold, you typed and sent deliberately. There is no contact form on this site and no account to create, so we collect far less passively than a typical booking site.

  • Contact details — name, email, country, and whatever you write in an email
  • Health information — medications and doses, diagnoses, cardiac and neurological history, family psychiatric history, previous psychedelic experience, supplements and travel-clinic prescriptions
  • Application answers — the thirty four screening questions, including what you are hoping for
  • Travel and logistics — arrival dates, dietary needs, emergency contact
  • Payment records — amounts, dates and references. We never see or store full card numbers
  • Site analytics — pages viewed, approximate region, device type, in aggregate

Withdrawing consent

You can withdraw at any time. Doing so before a retreat means we cannot proceed, because we will not accept a guest whose medical history we are not permitted to read. A decision to decline an application is always explained in writing, never left as an unexplained no.

Where your data lives

We are in Peru and our correspondence and storage providers are largely US-based, so information about you crosses borders under their standard contractual protections. Those providers process data on our behalf only; they are not permitted to use it for their own purposes, for analysis, or for training.

One detail specific to this place: medical files are not carried upriver on personal devices, and any paper generated during a week is destroyed at the end of it.

Cookies and analytics

Only what is needed to serve the site and count roughly how many people read which pages. No advertising pixels, no behavioural profiles, no data sold to anyone. Given what people research before contacting us, that is the minimum decent standard rather than a feature. Block cookies in your browser and the site works normally.

Your rights

We apply all of these to everyone regardless of where you live, because running two standards would be more work than simply doing the better one.

  • Access — a copy of everything we hold
  • Correction — fix anything inaccurate, which matters most for medication records
  • Deletion — erased, subject only to records we must keep by law
  • Withdraw consent — at any point
  • Portability — your data in a machine-readable format
  • Object or restrict — stop or limit a particular use
  • Complain — to your data protection authority, though we would rather fix it first

Email support@eclmedia.agency. We respond within 30 days and never ask why.

How we protect it

  • Access limited to two named people, technically and not just by policy
  • Multi-factor authentication on every account holding personal data
  • Encrypted in transit and at rest
  • Never posted in group chats, shared inboxes or messaging apps
  • A breach creating real risk to you is reported to you directly and promptly, and to the relevant authority

No system is perfectly secure and we will not claim otherwise. What we can say is that the surface is small by design: no accounts, no contact form, no stored card numbers, and a very short list of people with access.

Children

Our retreats are for adults only and we do not knowingly collect information from anyone under 18. If you believe a minor has sent us information, email us and we will delete it.

Changes to this policy

If we change anything material — who can read your file, how long we keep it, or where it is stored — we update the version and date at the top. Guests with an application in progress or an active integration year are told by email rather than left to notice. We will not quietly broaden what we do with your data and rely on you having missed it.

Contact

Questions, corrections, access and deletion requests all go to support@eclmedia.agency. A real person reads it and replies within 30 days, usually far sooner. If you want something removed, one line is enough.

This is a privacy policy written in plain language, not legal advice. If you need a formal statement for a legal or insurance purpose, write and we will provide one.

No charge to apply · reviewed within 48 hours

Now you know who reads it. Send the awkward question.


Two people see your medical history and nobody else. That is the whole reason we can ask you for it, and the reason we would rather you told us everything.

Scroll to Top