Privacy Policy

Welcome to El Salvador ("we," "our," or "us") is operated by Simbyotics. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Data We Collect

We may collect the following categories of information:

• Personal identifiers: name, email address, phone number, and postal address when you create an account, make a booking, or contact us.
• Payment information: payment transactions are processed by PayPal and Stripe. We do not store credit card numbers or CVV codes on our servers.
• Usage data: pages visited, clicks, session duration, browser type, IP address, and device information collected automatically.
• Communications: messages you send via our contact form, booking inquiries, or email correspondence.

2. How We Use Your Data

• To process bookings, orders, and payments.
• To send booking confirmations, order updates, and support communications.
• To improve our platform, services, and user experience.
• To send newsletters and marketing communications (you may opt out at any time).
• To comply with legal obligations and protect against fraud.

3. Data Sharing

We do not sell your personal data. We share data only with trusted service providers necessary to deliver our services:

• PayPal and Stripe — for payment processing.
• Supabase — for secure database and authentication services.
• Vercel — for website hosting and content delivery.

4. Cookies

We use cookies to manage your session (required for login), remember your preferences, and analyze site usage. Essential cookies cannot be disabled as they are required for the platform to function. Analytics cookies may be disabled via your browser settings.

5. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your account and associated data by contacting us.
• Portability — request a copy of your data in a machine-readable format.
• Opt out of marketing communications at any time via the unsubscribe link in any email.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), row-level security on our database, and restricted access controls. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your information.

7. Data Retention

We retain personal data only as long as necessary to provide our services and comply with legal obligations. Account data is retained until you request deletion. Transaction records may be retained for up to 7 years for accounting and legal compliance purposes.

8. Contact

For privacy-related requests or questions, contact us at: privacy@welcometoelsalvador.com