Privacy Policy

rivacy Policy

Last Updated: 05-25-2025

Saborea el Paraíso S.A. de C.V. ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or services. This policy complies with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and other applicable data protection laws.

1. Who We Are

Saborea el Paraíso is a boutique eco-hotel and hospitality experience located at Las Flores Beach, El Salvador.
Data Controller:
Saborea el Paraíso S.A. de C.V.
📍 [Insert Business Address]
📧 seasha@saboreaelparaiso.com
📞 [Insert International Phone Number]

2. What Personal Data We Collect

We may collect the following personal data:

Identity Data: Name, nationality, gender, passport/ID information (if required by law)

Contact Data: Email address, phone number, physical address

Booking Information: Travel dates, accommodation preferences, dietary or accessibility needs

Payment Information: Credit/debit card details, billing address (processed securely via third-party payment processors)

Wellness & Surf Forms: Health information provided voluntarily via liability waivers

Marketing Preferences: Email opt-ins, campaign interaction, language and region

Device Data: IP address, browser type, time zone, location, usage data (via cookies or analytics tools)

We do not knowingly collect data from minors under the age of 16 without verified parental consent.

3. How We Collect Your Data

Directly: When you make a booking, fill out a contact form, sign up for our newsletter, or participate in wellness/surf activities

Automatically: Through cookies, analytics scripts (e.g. Google Analytics, Meta Pixel)

From third-party platforms: If you book via Airbnb, Booking.com, or social media integrations

4. How We Use Your Data

We use your personal data for the following purposes:

To process bookings and manage guest stays

To personalize your experience and provide requested services (e.g. spa, dining, surf)

To send confirmations, updates, or customer support

To comply with local tourism laws and tax obligations

For marketing (with your consent), including updates on new offerings or exclusive promotions

To improve our website’s performance and usability

5. Legal Basis for Processing

We process your data under one or more of the following legal bases:

Contractual Necessity – To fulfill our obligations to you when you make a booking

Legal Obligation – To comply with government regulations (e.g. guest registry requirements)

Consent – For marketing and non-essential cookies

Legitimate Interest – For analytics, service improvement, and fraud prevention

6. Data Sharing & Third Parties

We only share your data when necessary:

Payment Providers (e.g. Stripe, PayPal) – to process secure payments

Booking Platforms (e.g. Airbnb, Booking.com) – if booked through them

Analytics & Marketing Tools (e.g. Google Analytics, Meta/Facebook)

Email Platforms (e.g. Flodesk, ConvertKit) – if subscribed to our newsletter

Legal or Regulatory Authorities – if required by Salvadoran law

We do not sell or rent your data to third parties.

7. International Data Transfers

If you are located in the EU or UK, your data may be transferred to and processed in El Salvador or other countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place in line with GDPR (e.g., Standard Contractual Clauses).

8. Data Retention

We retain your personal data only as long as necessary to:

Fulfill your booking and provide services

Comply with legal or tax requirements

Manage our marketing list (until you unsubscribe)

After this period, your data is securely deleted or anonymized.

9. Your Rights Under GDPR

If you are located in the EEA or UK, you have the right to:

Access your personal data

Correct inaccurate or incomplete data

Withdraw consent at any time (for marketing or cookies)

Request deletion ("right to be forgotten")

Object to processing or request data portability

Lodge a complaint with your local Data Protection Authority

To exercise these rights, please email us at [Insert privacy@ email].

10. Data Security

We take data protection seriously and implement appropriate security measures including:

SSL encryption for all website traffic

Secure third-party payment processors

Role-based access controls internally

Regular reviews of data handling policies

11. Cookies & Tracking

See our Cookie Notice for details on how we use cookies and your control options.

12. Updates to This Policy

We may revise this Privacy Policy occasionally. Updated versions will be posted on this page with a revised date. We encourage you to review it regularly.

13. Contact

If you have questions or requests regarding this policy or your data, contact us at:
📧 seasha@saboreaelparaiso.com
📞