Privacy Policy

1. Who We Are

El Salvador VIP ("Company," "we," "our," or "us") is a luxury ground transportation service operating in El Salvador. We operate the website at elsalvadorvip.com and related service pages.

For purposes of this Privacy Policy, El Salvador VIP is the data controller responsible for your personal information.

Contact Information:

• Email: hello@elsalvadorvip.com
• WhatsApp: +503 6680 7388

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you contact us or submit a booking request, including:

• Full name
• Email address
• Phone number (including WhatsApp number)
• Pickup location and destination
• Travel dates and times
• Number of passengers
• Service type requested (airport transfer, chauffeur, corporate, event, etc.)
• Flight details (for airport transfers)
• Any additional information you choose to include in your booking request

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information through cookies and similar technologies, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website
• Date and time of your visit

This information is collected through Google Analytics (via Google Tag Manager) only if you have consented to analytics cookies. See Section 8 for more information on cookies.

2.3 Information from Third-Party Platforms

If you contact us through WhatsApp or email, we receive the content of those communications. We do not access your social media profiles or any other third-party account information without your direct provision.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing Transportation Services

• Processing and confirming your booking
• Coordinating pickup and drop-off logistics
• Monitoring flight status for airport transfers
• Assigning and briefing your chauffeur
• Managing scheduling and itinerary details

3.2 Communication

• Responding to inquiries and booking requests
• Sending booking confirmations and ride details
• Communicating schedule updates or changes
• Providing chauffeur contact information on the day of service

3.3 Service Improvement

• Analyzing how our website is used (with your consent for analytics cookies)
• Improving the quality and reliability of our services
• Training and quality assurance

3.4 Legal and Safety Purposes

• Complying with applicable laws and legal obligations
• Protecting the safety of passengers, chauffeurs, and third parties
• Preventing fraud and unauthorized use of our services
• Enforcing our Terms of Service

3.5 What We Do Not Do

• We do not sell your personal information to third parties
• We do not use your information for automated decision-making that produces legal effects
• We do not send unsolicited marketing communications without your consent

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our processing of your personal data is based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Article 6(1)(b) – Performance of a Contract: Processing is necessary to fulfill a transportation booking you have requested or to take steps at your request prior to entering into a contract.
• Article 6(1)(f) – Legitimate Interests: We process information for the legitimate interests of operating our business, improving our services, preventing fraud, and ensuring safety — provided these interests are not overridden by your rights and interests.
• Article 6(1)(a) – Consent: Where we rely on your consent (such as for analytics cookies or marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Article 6(1)(c) – Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject.

5. How We Share Your Information

5.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

5.2 Service Providers

We share information with third-party service providers who assist us in operating our business, subject to confidentiality obligations. These include:

• Google LLC (Google Analytics / Google Tag Manager): We use Google Analytics to understand how visitors use our website. Google may process your data in the United States. Google's processing is subject to their own Privacy Policy at policies.google.com/privacy. Analytics cookies are only active if you have consented.
• Meta Platforms, Inc. (WhatsApp): When you contact us via WhatsApp, your communications are processed through WhatsApp/Meta's infrastructure. Meta's privacy practices are governed by their own policies.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person, to investigate fraud, or to protect our rights.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you via email or a notice on our website before your information is transferred and becomes subject to a different privacy policy.

6. International Data Transfers

El Salvador VIP is based in El Salvador. If you are located in the European Economic Area (EEA), United Kingdom, California, or elsewhere, your information will be processed in El Salvador and potentially transferred to and processed in the United States (by our technology vendors such as Google).

When we transfer personal data of individuals located in the EEA or UK to countries not deemed adequate under GDPR, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) established by the European Commission, or other mechanisms permitted under applicable law.

For transfers to Google LLC in the United States, Google participates in the EU-U.S. Data Privacy Framework. For more information, see Google's data transfer mechanisms at privacy.google.com.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Booking records: Retained for up to seven (7) years from the date of service to comply with business record-keeping requirements and potential legal claims.
• Communication records (WhatsApp/email): Retained for the duration of your relationship with us and up to three (3) years thereafter, unless required longer by law.
• Analytics data: Retained per Google Analytics' data retention settings (default: 14 months from last activity, adjustable in our Google Analytics configuration).
• Cookie consent records: Retained in your browser's local storage until cleared by you.

When we no longer need your personal information, we securely delete or anonymize it.

8. Cookies & Tracking Technologies

8.1 What We Use

Our website uses the following types of cookies and similar technologies:

• Strictly Necessary: These are required for the website to function. They store your language preference (lang) and your cookie consent choice (cookieConsent). These do not require consent and cannot be disabled.
• Analytics (Consent Required): Google Analytics cookies (via Google Tag Manager) help us understand how visitors interact with our website. These are only placed if you click "Accept All" on our cookie banner.
• Marketing (Consent Required): Advertising or remarketing tags managed through Google Tag Manager. These are only activated with your consent.

8.2 Managing Cookies

You can control cookies in the following ways:

• Cookie Banner: When you first visit our site, you can select "Necessary Only" to decline non-essential cookies, or "Accept All" to consent to analytics and marketing cookies.
• Browser Settings: You can configure your browser to block or delete cookies. See your browser's help documentation for instructions.
• Google Analytics Opt-Out: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
• Reset Your Consent: Clear your browser's local storage and cookies to reset your cookie preference on our site.

9. Your Rights Under GDPR

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable national data protection laws:

• Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
• Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / "Right to Be Forgotten" (Art. 17): You have the right to request deletion of your personal data, subject to certain exceptions (e.g., where we are required to retain records by law).
• Right to Restriction of Processing (Art. 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and is carried out by automated means.
• Right to Object (Art. 21): You have the right to object to processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority in your country of residence. A list of EEA data protection authorities is available at edpb.europa.eu.

To exercise any of these rights, please contact us at hello@elsalvadorvip.com. We will respond within 30 days (or sooner where required by law). We may need to verify your identity before processing your request.

10. Your Rights Under the California Consumer Privacy Act (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), grants you the following rights:

10.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.

10.2 Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (including our legal obligation to maintain business records and our need to complete transactions you requested).

10.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

10.4 Right to Opt-Out of Sale or Sharing

You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising purposes, as those terms are defined by the CCPA/CPRA. See Section 11 below for more information.

10.5 Right to Limit Use of Sensitive Personal Information

You have the right to direct us to limit our use of sensitive personal information to what is necessary to perform the services you requested.

10.6 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a different level of quality as a result of exercising your privacy rights.

10.7 How to Submit a Request

To submit a request to exercise your CCPA/CPRA rights, please contact us by email at hello@elsalvadorvip.com with the subject line "California Privacy Request." We will respond within 45 days of receipt of a verifiable consumer request. We may need to verify your identity before fulfilling your request.

You may designate an authorized agent to submit requests on your behalf. We will require proof of the authorized agent's permission and verification of your identity.

10.8 Categories of Personal Information We Collect (CCPA Disclosure)

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, IP address
• Personal Records: Pickup/drop-off locations, booking details, travel dates
• Internet Activity: Browsing and search history on our website (analytics, if consented)

We collect this information for the purposes described in Section 3 (providing transportation services, customer communication, service improvement, and legal/safety purposes).

11. Do Not Sell or Share My Personal Information

El Salvador VIP does not sell your personal information to third parties for monetary consideration.

However, we use Google Analytics (via Google Tag Manager), which may involve the "sharing" of certain analytics data with Google for cross-context behavioral advertising purposes under the CCPA/CPRA definition. You may opt out of this sharing by:

• Clicking "Necessary Only" on our cookie consent banner (if you have not already done so)
• Installing the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout
• Contacting us at hello@elsalvadorvip.com with the subject line "Do Not Share My Personal Information"

California residents may also use the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we will treat it as a request to opt out of the sharing of your information for cross-context behavioral advertising.

12. Children's Privacy

Our website and services are not directed to children under the age of 16 (or under 13 in jurisdictions where that is the applicable minimum age). We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child under the applicable age, please contact us immediately at hello@elsalvadorvip.com and we will delete that information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other business reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes, we may provide additional notice, such as a notice on our website.

Your continued use of our website after any such update constitutes your acknowledgment of the revised Privacy Policy. We encourage you to review this page periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

We will endeavor to respond to all privacy-related inquiries within 30 days. For complex requests or where the law requires a longer period, we will notify you of any extension within the initial 30-day period.