Privacy Policy

Casa Venturas, San Juan, Puerto Rico. micasaventuras@gmail.com, +1 929 372 4529. We are the data controller for information collected through this website.

• Booking information: name, email, phone, tour date, number of guests. Submitted via our booking form and processed through Bókun (our booking engine).
• Contact form: name, email, message.
• Chat with Cavi (AI guide): the content of your conversation, processed by Anthropic (Claude API) to generate responses. Transcripts are retained for up to 90 days for quality review, then deleted.
• Technical data: IP address, browser type, pages visited. Collected automatically by our hosting provider (Cloudflare) for security and performance.

We do not sell your personal information. We do not use advertising cookies or cross-site trackers.

• To confirm and operate your tour (performance of contract, GDPR Art. 6(1)(b)).
• To answer questions sent via our contact form or chat (legitimate interest).
• To comply with Puerto Rico tax and tourism regulations (legal obligation).
• To protect the site against fraud and abuse (legitimate interest).

We rely on a small number of trusted service providers that process data strictly on our instructions:

• Bókun (a TripAdvisor company), booking engine and payment processing (PCI-DSS compliant). Bókun acts as data processor under a signed Data Processing Agreement.
• Anthropic, PBC, Claude API powering our Cavi chat assistant. Anthropic does not train on customer data.
• Resend, transactional email delivery (booking confirmations, replies to contact messages).
• Cloudflare, website hosting, CDN, and DDoS protection.

If you book one of our tours through a third-party platform such as Viator, TripAdvisor Experiences, GetYourGuide, or Airbnb Experiences, that platform is the data controller for your booking data. Their own privacy policies apply to those transactions, we only receive the information we need to operate the tour.

• Booking records: 7 years (US tax retention requirement).
• Contact form messages: up to 2 years.
• Chat transcripts: up to 90 days.
• Server logs: up to 30 days.

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct or delete it.
• Opt out of any future marketing messages (we do not currently send any).
• Receive your data in a portable format (GDPR Art. 20).
• Lodge a complaint with a data protection authority (e.g. Puerto Rico DACO, or your local EU authority).

To exercise any of these rights, email micasaventuras@gmail.com. We respond within 30 days. California residents may request a "Do Not Sell or Share" opt-out; note that we do not sell or share personal information for advertising purposes.

We honor "Do Not Track" browser signals: we do not use cross-site tracking cookies, so no additional action is taken beyond our baseline minimal collection.

All data is transmitted over HTTPS and stored in encrypted form by our processors. In the event of a security breach affecting personal information of Puerto Rico residents, we will notify affected individuals and the Puerto Rico Department of Consumer Affairs (DACO) within ten (10) days from the detection of the breach, as required by Act 111-2005. For EU residents, we will also notify the relevant supervisory authority within 72 hours as required by GDPR Art. 33.

Some of our processors (Bókun, Anthropic, Resend, Cloudflare) are based in the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your data may be transferred to and processed in the US under Standard Contractual Clauses (SCCs) approved by the European Commission.

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 (COPPA, 15 U.S.C. 6501-6506). Tours that welcome children (El Yunque, Catamaran) require a parent or legal guardian to book and accompany the minor.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. For material changes, we will post a notice on this page at least 30 days before the change takes effect.

Questions about this policy or your personal information:
Casa Venturas, San Juan, Puerto Rico
micasaventuras@gmail.com, +1 929 372 4529