Privacy Policy

1. Who is responsible for your data

This English version is a translation provided for convenience; if there is any discrepancy, the Spanish version prevails. Golfo Travel—the trade name of Heydi Carolina Robles Montiel, an individual (sole proprietor)—is the data controller of your personal data, in accordance with the Ley para la Protección de Datos Personales (Personal Data Protection Law, Legislative Decree 144/2024). Domicile: La Unión, El Salvador; office across from the Migration Office. For any matter concerning your data, write to us at golfotraveltours@gmail.com or via WhatsApp at +503 7878 8279.

2. What data we process

Only the data necessary for your trip: (a) when booking: name, phone number, email, country, number of people, date, time, pickup point and whether minors are traveling; (b) for the crossing between El Salvador and Nicaragua, in either direction: the data and copies of documents required by the migration authorities, used only for that procedure; (c) the messages you exchange with us on WhatsApp; (d) your opinion after the trip, and the photos and videos the crew takes during the trip: shots in which you appear in a recognizable way are published only if you authorize it; if you do not authorize it, they are deleted within the 30 days following the trip. For your privacy, we do not ask for or record health data: if you have a medical or mobility condition, or are pregnant, inform the crew directly before boarding. We do not receive or store card data: payment is in cash only, before boarding the boat.

3. What we use your data for and on what legal basis

(a) To manage, confirm and remind you of your booking; to send you the time, meeting or pickup point, migration requirements and recommendations — basis: performance of the service you contract and your consent when booking. (b) To answer your inquiries on WhatsApp — basis: your request. (c) To comply with legal, migration and maritime safety obligations — basis: legal obligation. (d) To ask for your opinion with a single-use link — basis: your consent; you may ignore it. (e) To publish your opinion with your name and country, and the photos or videos in which you appear, on golfotravels.com, Facebook, Instagram and TikTok — basis: only your express consent (section 4). (f) To send you Golfo Travel offers, news and promotions by email and WhatsApp — basis: only your consent, which we ask for in a separate question when you book; choosing “No” does not affect your booking and you may unsubscribe whenever you wish using the link in each email or by sending «BAJA» (unsubscribe) on WhatsApp. Offers are sent only on business days and during business hours and are never a condition of your booking. Messages that are part of the service itself (confirmation, reminder, weather-related changes, survey) are not advertising. (g) To defend Golfo Travel against claims and to comply with the legal retention periods — basis: legal obligation and legitimate interest. We do not use your data for other purposes, nor do we sell it.

4. Photos, videos and testimonials: your authorization

When you book, we ask whether you authorize us to publish: on the website it is a mandatory Yes-or-No question and on WhatsApp it is sent in a separate message. Choosing “No” does not affect your booking or the service in any way; if we ask you on WhatsApp and you do not reply, we take your answer as NO; your latest answer always applies and you may withdraw it whenever you wish. When you withdraw it, we unpublish whatever depends on it within a maximum of 5 business days. We do not publish photos or videos in which a minor is recognizable.

5. Minors

We only process minors' data when it is provided by the responsible adult who makes the booking and travels with them, and solely for the trip. If, when booking, you tell us that minors are traveling, we contact you before the trip to confirm their age, their documents and a life jacket in their size.

6. Who else sees your data (data processors)

Only providers that act under our instructions, process the data for the stated purpose and are subject to the law (Arts. 24(h) and 33). The complete list, with country and a link to each provider's policy, is in the “Data processors” table that follows this section. The following also receive only what is necessary for the trip: the carriers that provide the ground transportation (each passenger's name, to verify that only the people on the booking travel, the number of passengers, the pickup point and time, and the booking code) and the migration and maritime authorities of El Salvador and Nicaragua when the law requires it. We do not sell your data.

Data processors

7. Where your data is hosted

To manage your booking, through any channel, we use the providers in section 6, which host the information outside El Salvador (European Union, United States, Canada and United Kingdom). They act as data processors: they process your data on our behalf, solely to provide you with the service, with their own security measures and contractual commitments. We inform you of this here and in the Terms and Conditions, which you accept when booking.

8. How long we keep your data

Booking data and proof of the contract: for the retention periods required by consumer protection and tax laws; data and copies of travel documents: up to 30 days after your trip; WhatsApp conversations: up to 12 months from the last message, unless they are related to an ongoing claim; opinions, photos and videos published with your authorization: until you withdraw it; photos and videos in which you appear without authorization to publish them: up to 30 days after the trip. After that, they are deleted or anonymized.

9. Your rights

You may request access, rectification, deletion, objection, portability, erasure (“right to be forgotten”) and restriction of the processing of your data, and withdraw any consent, free of charge. Write to us from the number or email address you used with us (WhatsApp +503 7878 8279 or golfotraveltours@gmail.com). Two shortcuts: «MIS DATOS» (“my data”) to receive a copy of your data and «ELIMINAR DATOS» (“delete data”) to request its deletion. We will verify your identity and respond within the time limits established by law. We may retain, without using it for any other purpose, the data that the law requires us to keep or that is necessary to handle a claim, and we will tell you so in our response.

10. Security

We apply reasonable technical and organizational measures to protect your data. If a security breach affecting it occurs, we will notify the competent authorities and you, within the time period and in the manner established by law, together with the measures you can take.

11. Cookies

We use necessary cookies for the website to work (session, language, booking process and the one that remembers your cookie choice). Optional cookies are activated only if you accept them in the cookie bar: (a) those of the website chat (Chaty) and (b) those of Google Tag Manager, the Google tool with which we measure use of the website (pages visited, source of the visit, clicks on the booking or WhatsApp buttons) and, through it, those of Google Analytics. Neither of the two is loaded on the pages where you enter your data (booking, survey and appointment confirmation). If you do not accept them, the website and the booking work the same way. If in the future we use advertising tools (for example, the Meta pixel), they will remain disabled until you accept them and we will name them here. You may change your choice at any time by deleting the golfotravels.com cookies in your browser.

12. Changes to this policy

We will publish each version with its date on this page. If a change extends the purposes for which we use your data, we will inform you through our channels and, when the law requires it, we will ask you for a new consent.

13. How you accept this policy

When booking, you indicate that you have read and accept this policy and the terms, and you answer three questions separately: (1) whether minors are traveling (section 5); (2) the publication of photos and testimonials (section 4); and (3) whether you want to receive offers and news (section 3(f)). We keep the date and the answer to each consent as proof, and your booking confirmation includes the link to this policy and to the terms.

Version 3.3 · October 12, 2026 · Golfo Travel, La Unión, El Salvador. Any change will be published on this same page with its date.