Privacy Policy

I. Information We Collect

We may collect personal information directly from you, automatically through your use of our website, and from third parties involved in providing travel services.

A. Information You Provide to Us

When you contact us, submit a form, request a quote, reserve a service, communicate through WhatsApp, or otherwise interact with us, we may collect information such as:

• Contact and identity information, including your full name, email address, phone number, WhatsApp number, country of residence, preferred language, and other contact details.
• Trip planning information, including your intended travel dates, length of stay, date flexibility, number of guests, number of adults, number of children, children's ages when relevant, travel style, preferred destinations, accommodation preferences, activities of interest, estimated budget, services requested, special requests, and other details you choose to share.
• Reservation information, including the type of service requested, selected tours or activities, vacation rental preferences, car rental needs, full trip package requests, arrival date, departure date, destination or area of interest, accommodation style, estimated budget, and notes related to your requested booking.
• Car rental information, including pickup date, return date, pickup location, return location, vehicle type, number of drivers, driver's license country, whether you have an International Driving Permit, optional add-ons such as GPS, child seat, surfboard rack, additional driver coverage, insurance upgrades, airport meet-and-greet, and other notes relevant to your rental request.
• Communications, including messages, questions, reviews, feedback, preferences, complaints, support requests, and other information you send to us through forms, email, WhatsApp, social media, phone, or other channels.
• Payment and transaction information, if you approve a quote, make a deposit, complete a booking, or purchase a service. We may collect billing details, transaction records, payment status, and related commercial information. Full payment card information is generally processed by third-party payment processors, and we do not intend to store full credit card numbers on our own systems.
• Travel document information, only when needed to arrange or support a service. This may include passport information, driver's license information, flight details, emergency contact information, insurance details, or other travel-related information required by lodging providers, vehicle rental partners, tour operators, transportation providers, government authorities, or other service providers.
• Marketing preferences, including whether you agree to receive promotional communications, how you heard about us, and your communication preferences.

You are not required to provide all of this information, but if you choose not to provide information that is necessary for a service, we may not be able to respond fully, prepare a quote, confirm availability, complete a booking, arrange transportation, or provide the requested travel support.

II. Sensitive Personal Information

Depending on the service requested, we may collect or process information that may be considered sensitive under certain privacy laws. This may include:

• Passport or government identification information, if needed for travel arrangements.
• Driver's license information or license country, if needed for vehicle rental services.
• Payment-related information, if needed to process deposits, invoices, or purchases.
• Children's information provided by a parent, guardian, or responsible adult for travel planning purposes.
• Health, accessibility, dietary, allergy, mobility, or accommodation-related information, if you voluntarily provide it so we can support your trip.
• Precise location information, only if you choose to share it with us through WhatsApp, mobile device settings, maps, or another location-sharing feature.
• Emergency contact information, if needed for safety, transportation, rental, or travel coordination.

We use sensitive personal information only for purposes reasonably necessary to provide services, protect safety, comply with legal obligations, verify identity, process transactions, or as otherwise permitted by law. We do not use sensitive personal information to infer characteristics about you for unrelated marketing purposes.

III. Information We Collect Automatically

When you visit our website, we may automatically collect certain technical and usage information, such as:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Referring website.
• Pages viewed.
• Dates and times of visits.
• Approximate location based on IP address.
• Interactions with website pages, buttons, forms, links, or embedded content.
• Search terms or navigation paths within the website.
• Cookie identifiers and similar tracking information.

This information helps us operate the website, understand visitor behavior, improve performance, maintain security, troubleshoot errors, measure marketing effectiveness, and improve the services we offer.

IV. Information We Receive From Third Parties

We may receive information about you from third parties when necessary or useful to provide our services, such as:

• Vacation rental owners, property managers, or lodging partners.
• Tour guides, adventure operators, transportation providers, and car rental partners.
• Payment processors and booking support providers.
• Travel companions or group organizers who submit information on your behalf.
• Social media platforms when you interact with our accounts or content.
• Advertising, analytics, or marketing partners, if we use those tools.
• Referral partners or people who recommend our services to you.
• Publicly available sources, where permitted by law.

We use information from third parties consistently with this Privacy Policy and applicable law.

V. Cookies and Similar Technologies

Our website may use cookies, pixels, web beacons, local storage, analytics tools, advertising tools, and similar technologies.

Cookies are small files placed on your browser or device. These technologies may help us:

• Keep the website functioning properly.
• Remember preferences.
• Understand how visitors use the website.
• Improve website design and content.
• Measure traffic and performance.
• Support security and fraud prevention.
• Evaluate marketing campaigns.
• Provide or measure advertising, where applicable.

We may use different categories of cookies and tracking technologies, including:

• Necessary cookies, which help the website function and cannot easily be disabled without affecting basic features.
• Preference cookies, which remember choices such as language or display preferences.
• Analytics cookies, which help us understand how visitors use the website.
• Advertising or marketing cookies, which may be used to measure ads, retarget visitors, or understand the effectiveness of promotional campaigns.
• Social media and third-party tools, which may involve platforms such as WhatsApp, TikTok, Meta, Google, or similar providers if we use their links, pixels, embeds, analytics, or advertising services.

You can usually set your browser to reject, block, or delete cookies. Some parts of the website may not work properly if you disable certain cookies. Where required by law, we will provide additional cookie choices or obtain consent before using certain non-essential cookies.

VI. How We Use Personal Information

We may use personal information for the following purposes:

• To respond to inquiries and messages.
• To provide information about our services.
• To prepare personalized travel recommendations.
• To create custom itineraries.
• To check availability for rentals, tours, transportation, or other services.
• To prepare quotes and proposals.
• To process reservation requests.
• To arrange vacation rentals, tours, transportation, car rentals, wellness experiences, or related travel services.
• To communicate with you before, during, and after your trip.
• To coordinate with local partners, providers, guides, drivers, property managers, rental providers, and support teams.
• To process deposits, invoices, payments, refunds, or transaction records.
• To provide customer support.
• To send operational messages, confirmations, reminders, updates, and service-related notices.
• To send marketing messages, newsletters, offers, or travel content where permitted by law or with your consent.
• To personalize your experience.
• To improve our website, services, content, and customer experience.
• To perform analytics and business reporting.
• To maintain safety, security, fraud prevention, and quality control.
• To enforce our terms, policies, agreements, and legal rights.
• To comply with legal, tax, accounting, regulatory, or law enforcement obligations.
• To protect the rights, safety, and property of travelers, guests, service providers, our business, and others.
• For any other purpose disclosed at the time of collection or with your consent.

We may also use aggregated or de-identified information for analytics, reporting, research, marketing, or business improvement purposes.

VII. Legal Bases for Processing

Where a legal basis is required, we may process personal information based on one or more of the following:

• Consent, when you choose to submit information, agree to receive marketing, accept cookies, share sensitive information, or authorize specific processing.
• Performance of a contract, when processing is necessary to provide requested services, prepare quotes, arrange reservations, process payments, coordinate travel services, or communicate with you about your booking.
• Legitimate interests, including operating our business, improving our website and services, communicating with customers, preventing fraud, protecting safety, managing provider relationships, and conducting marketing where permitted by law.
• Legal obligations, when we must keep records, respond to lawful requests, comply with tax/accounting obligations, cooperate with authorities, or meet regulatory requirements.
• Vital interests or safety, where processing is necessary to protect someone's health, safety, or security, including during travel, transportation, emergencies, or urgent support situations.

VIII. How We Share Personal Information

We may share personal information with third parties when necessary to provide our services, operate our business, comply with law, or protect legitimate interests. These third parties may include:

• Service providers, such as website hosting companies, form providers, CRM providers, email providers, payment processors, analytics providers, IT support providers, cloud storage providers, security providers, communication tools, and administrative support providers.
• Travel and hospitality partners, such as vacation rental owners, property managers, hotels, lodging providers, tour operators, guides, transportation providers, car rental partners, drivers, wellness providers, restaurants, activity providers, and other partners involved in fulfilling your requested services.
• Payment processors and financial providers, when needed to process deposits, payments, refunds, invoices, chargebacks, or related transactions.
• Communication platforms, including WhatsApp, email systems, SMS tools, phone providers, and similar services used to communicate with you.
• Advertising and analytics partners, if we use marketing, remarketing, analytics, conversion tracking, or social media tools.
• Professional advisors, including attorneys, accountants, auditors, insurers, consultants, and other professional service providers.
• Government authorities, law enforcement, regulators, courts, or other parties, when required by law, legal process, safety obligations, or to protect rights and interests.
• Business transaction parties, if we are involved in a merger, acquisition, sale of assets, financing, reorganization, bankruptcy, or similar business transaction.
• Other parties with your consent, or as otherwise disclosed to you at the time of collection.

We require service providers to use personal information only as needed to provide services to us or as otherwise permitted by law.

IX. Categories of Personal Information Disclosed or Shared

Depending on your interactions with us, we may disclose or share the following categories of personal information:

We do not sell personal information for money. However, some privacy laws define "sale," "sharing," or "targeted advertising" broadly. If we use advertising pixels, retargeting tools, or analytics tools that disclose identifiers or internet activity information to advertising partners, that activity may be considered "sharing" or "targeted advertising" under certain laws. Where required, you may opt out of that type of sharing.

X. Links to Other Websites and Third-Party Services

Our website and communications may link to or interact with third-party services, such as WhatsApp, TikTok, social media platforms, payment processors, maps, booking tools, partner websites, or other websites not owned or controlled by us.

This Privacy Policy applies only to information we collect or process. Third-party websites and services have their own privacy policies, terms, cookies, and data practices. We are not responsible for the privacy practices, security, content, or conduct of third-party websites or services.

XI. Data Security

We use reasonable administrative, technical, and physical measures designed to protect personal information from unauthorized access, misuse, loss, disclosure, alteration, or destruction.

These measures may include access controls, secure systems, limited access to personal information, encrypted connections where available, vendor review, internal procedures, and security-conscious business practices.

However, no website, email system, messaging platform, payment system, or electronic storage method is completely secure. We cannot guarantee absolute security. You should use caution when sending sensitive information electronically, especially through channels that are not encrypted end-to-end or are controlled by third parties.

If we learn of a security incident affecting your personal information, we will take appropriate steps and notify affected individuals, regulators, or authorities where required by law.

XII. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• The type of information collected.
• The reason the information was collected.
• Whether you have an active inquiry, reservation, booking, rental, or trip.
• Whether we need the information to provide services or support.
• Whether we need the information for tax, accounting, legal, insurance, dispute resolution, or fraud prevention purposes.
• Whether retention is required by a service provider, travel partner, payment processor, or applicable law.
• Whether you have requested deletion, where deletion is legally available.

We may retain de-identified, anonymized, or aggregated information for business analytics, reporting, or service improvement.

XIII. Your Choices

You have choices regarding how we use your information.

A. Marketing Communications

You may opt out of marketing emails by following the unsubscribe instructions in the email or contacting us directly.

You may opt out of promotional SMS, WhatsApp, or similar messages by replying with an opt-out instruction where available or contacting us directly. Operational messages related to inquiries, reservations, bookings, safety, payments, or active services may still be sent where necessary.

Consent to marketing is not required to purchase or request services.

B. Cookies and Browser Controls

You can control cookies through your browser settings. You may be able to block, delete, or restrict cookies. Some website features may not function properly if cookies are disabled.

Where required, we will provide cookie consent tools or additional opt-out choices for analytics or advertising cookies.

C. Targeted Advertising and Analytics

If we use advertising or analytics partners, you may be able to opt out through browser controls, platform settings, industry opt-out tools, or privacy preference signals.

Where required by law, we will honor applicable opt-out requests for sale, sharing, targeted advertising, or certain profiling activities.

D. Global Privacy Control

Where required by applicable law and technically feasible, we will treat recognized Global Privacy Control or similar browser-based opt-out preference signals as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal.

E. Updating Your Information

You may contact us to update, correct, or supplement information you provided to us.

XIV. Notice to Certain U.S. State Residents

Depending on your state of residence and the applicability of state privacy laws, you may have some or all of the following rights:

• The right to know or confirm whether we process your personal information.
• The right to access personal information we maintain about you.
• The right to receive a portable copy of certain personal information.
• The right to correct inaccurate personal information.
• The right to request deletion of personal information.
• The right to opt out of sale, sharing, targeted advertising, or certain profiling activities.
• The right to limit certain uses or disclosures of sensitive personal information, where applicable.
• The right not to be discriminated against for exercising privacy rights.
• The right to appeal a denied privacy request, where applicable.

These rights may be subject to exceptions, verification requirements, legal limitations, and business-size thresholds under applicable law.

California Notice

For California residents, this section is intended to provide notice under the California Consumer Privacy Act, as amended. In the preceding 12 months, we may have collected the categories of personal information listed in this Privacy Policy. We collect and disclose those categories for the purposes described above.

We do not sell personal information for money. If our use of advertising or analytics tools is considered "sharing" under California law, you may request to opt out.

We do not knowingly sell or share personal information of individuals under 16 years of age.

We do not use sensitive personal information for purposes other than those permitted by law, such as providing requested services, protecting safety, processing transactions, or complying with legal obligations.

XV. Notice to Individuals in the European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with similar privacy rights, you may have the following rights, subject to legal conditions and exceptions:

• Right to be informed about how your personal data is processed.
• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete personal data.
• Right to erasure of personal data in certain circumstances.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing, including direct marketing.
• Right to withdraw consent where processing is based on consent.
• Right not to be subject to certain solely automated decisions that produce legal or similarly significant effects.
• Right to lodge a complaint with a supervisory authority.

We may process personal data based on consent, contract necessity, legitimate interests, legal obligations, vital interests, or other lawful bases permitted by applicable law.

Because our services may involve El Salvador, the United States, and service providers in other countries, your personal data may be transferred to and processed in countries that may not provide the same level of data protection as your home jurisdiction. Where required, we will use appropriate safeguards for international transfers.

EU/UK Representative: [PENDING - EU/UK representative details]

Data Protection Contact: [PENDING - DPO/privacy contact details]

XVI. Notice Under El Salvador Personal Data Protection Law

To the extent El Salvador's personal data protection law applies, we process personal data according to principles such as legality, transparency, purpose limitation, data minimization, accuracy, security, confidentiality, and accountability.

You may have rights commonly referred to as ARCO-POL rights, including:

• Access to your personal data.
• Rectification or correction of inaccurate data.
• Cancellation or deletion where legally available.
• Opposition to certain processing.
• Portability, where applicable.
• Limitation or restriction of processing, where applicable.
• The right to be informed about processing purposes, recipients, and security measures.

Where required, we will process personal data with informed consent or another lawful basis, use personal data only for legitimate purposes, implement reasonable security measures, and respond to rights requests according to applicable legal timelines.

Data Protection Officer or Privacy Contact: [PENDING - privacy contact name/title/email]

XVII. How to Exercise Your Privacy Rights

To exercise privacy rights or ask questions about your personal information, contact us using the methods below:

• Email: [PENDING - privacy email]
• Contact Form: Contact page
• WhatsApp: [PENDING - WhatsApp number]
• Mailing Address: [PENDING - business address]

To protect your privacy and security, we may need to verify your identity before responding to certain requests. Verification may require you to provide information that matches our records, confirm control of an email address or phone number, or provide additional details about your interaction with us.

You may authorize another person to submit a request on your behalf where permitted by law. We may require proof of authorization and may also require you to verify your identity directly.

We will respond to requests within the time required by applicable law. In some cases, we may deny a request, in whole or in part, if an exception applies, such as when retention is necessary to complete a transaction, provide services, comply with law, detect fraud, protect safety, resolve disputes, maintain records, or exercise legal rights.

XVIII. Children's Information

Our website and services are intended for adults who are planning or purchasing travel services. We do not knowingly collect personal information directly from children without appropriate parental or guardian involvement.

Because travel planning may involve families, a parent, guardian, or responsible adult may provide information about children, such as names, ages, travel dates, accommodation needs, safety considerations, or activity preferences. We use children's information only as needed to arrange or support requested travel services, comply with law, protect safety, or fulfill a booking.

If you believe a child has provided personal information directly to us without appropriate consent, please contact us so we can review and delete the information where required.

XIX. International Data Storage and Processing

We may store and process personal information in El Salvador, the United States, and other countries where we, our service providers, or our travel partners operate.

By using our services or providing information to us, you understand that your information may be transferred to countries outside your country of residence. We will take steps required by applicable law to protect personal information in connection with cross-border transfers.

XX. Accessibility

We want this Privacy Policy to be accessible. If you have difficulty accessing or understanding this Privacy Policy, contact us and we will try to provide the information in another format.

XXI. Do Not Track Signals

Some browsers send "Do Not Track" signals. At this time, our website may not respond automatically to all Do Not Track signals. Where required by law, we will honor recognized opt-out preference signals, such as Global Privacy Control, for applicable sale, sharing, or targeted advertising opt-outs.

XXII. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, technology, vendors, legal requirements, or business practices.

When we update this Privacy Policy, we will revise the "Last Updated" date. Changes are effective when posted unless a later effective date is stated. Your continued use of our website or services after an updated Privacy Policy is posted means you acknowledge the updated policy.

XXIII. How to Contact Us

For questions about this Privacy Policy, your personal information, or your privacy rights, contact us at:

• Business Name: Destinations El Salvador / DestinationsSV
• Email: [PENDING - privacy email]
• WhatsApp: [PENDING - WhatsApp number]
• Mailing Address: [PENDING - business address]
• Privacy Contact or DPO: [PENDING - name/title, if applicable]