Privacy Policy

1. What data we collect

When you use ExploreDomRep's e-ticket assistance service, we collect the information you provide to complete your Dominican Republic e-ticket form. This includes:

• Full name and date of birth
• Email address
• Passport number, issuing country, and expiry date
• Travel itinerary details (flight numbers, dates, accommodation)
• Passport scan or photo (if you use our document upload feature)
• IP address and browser information (user agent), collected automatically when you use our service
• Timestamps of consent actions (e.g., when you accept terms, acknowledge the refund policy)

We do not collect payment card details directly — payments are processed by a third-party payment processor.

2. How we use your data

We use the information you provide solely to:

• Complete and submit your Dominican Republic e-ticket form on your behalf
• Send you a confirmation email with your submission details and QR code
• Respond to support inquiries related to your submission
• Maintain records necessary for payment dispute resolution and fraud prevention
• Respond to chargebacks or payment disputes with evidence of your authorization and service usage

We do not use your data for marketing purposes, and we do not sell or share your personal information with third parties for commercial purposes.

3. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contractual necessity — Processing your personal and travel data is necessary to perform the e-ticket assistance service you have requested and paid for.
• Legitimate interest — We may process limited data (e.g., email address, submission records) to respond to support inquiries and to maintain the security of our service.
• Consent — Where you voluntarily upload passport scans or travel documents, your upload constitutes consent to process those documents for OCR extraction. You may decline to upload documents and enter your details manually instead.

4. How we store your data

Submission data is stored in Supabase, a cloud database platform hosted in the United States. Data is encrypted at rest and in transit. We retain submission records for up to 90 days to allow for support requests, after which they are automatically deleted.

Passport scans and travel document images are treated as sensitive data and are deleted within 90 days of upload. We do not retain document images beyond this period.

Exception for payment records: Transaction records, consent logs, IP addresses, and payment-related metadata may be retained for up to 540 days (18 months) from the date of transaction for the purpose of payment dispute resolution. Chargebacks can be initiated up to 120 days after a transaction and disputes may take several additional months to resolve. This extended retention ensures we can respond to payment disputes with complete evidence.

5. International data transfers

ExploreDomRep is based in the United States. If you are located in the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the United States and other countries where our service providers operate. These countries may not provide the same level of data protection as your home country.

We rely on the following safeguards for international transfers:

• The EU–US Data Privacy Framework, where applicable
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Your explicit consent when you submit your data through our service

6. Third-party services (sub-processors)

We use the following third-party services to operate ExploreDomRep:

• Anthropic(United States) — used for OCR (optical character recognition) to extract passport and flight information from uploaded documents. Document data is processed according to Anthropic's data handling policies.
• Resend (United States) — used to send transactional confirmation emails to customers. Your email address is passed to Resend solely to deliver your confirmation.
• Stripe(United States) — used for secure payment processing. Your payment and transaction data is handled according to Stripe's privacy policy. We do not store your credit card details.
• Supabase (United States) — used for secure database storage of submissions.
• Vercel (United States) — used to host and serve the ExploreDomRep website.
• Google(United States) — used for website analytics via Google Analytics 4. Aggregate usage data is collected to improve the site experience. See Google's privacy policy for details on how Google processes this data.

7. Cookies and tracking

ExploreDomRep uses the following cookies and analytics services:

• Functional cookies — necessary for the operation of our service (for example, to maintain your session while completing a form).
• Google Analytics 4 (GA4) — used to understand how visitors use our website. GA4 sets cookies including _ga and _ga_*to distinguish unique users and sessions. These cookies are retained for up to 2 years. Data collected includes pages visited, time on site, and general location (country/region). Google's privacy policy applies to this data.
• Plausible Analytics — a privacy-focused analytics service that does not use cookies and does not collect personal data. Plausible provides aggregate website usage statistics only.
• Google Ads conversion tracking — when you arrive on our site from a Google ad, a conversion cookie may be set to measure ad effectiveness (e.g., whether you completed a purchase or started a form). This cookie is used solely for conversion measurement and does not enable remarketing or personalised advertising.

Both Google Analytics and Google Ads cookies are loaded only after you accept cookies via our consent banner. If you decline, no Google cookies are set. We do not use remarketing pixels or third-party advertising networks. We do not sell or share analytics data with third parties for commercial purposes.

8. Your rights

All users have the right to:

• Request a copy of the personal data we hold about you
• Request deletion of your personal data before the automatic 90-day retention period
• Contact us with questions or concerns about how your data is handled

If you are located in the EEA, UK, or Switzerland, you also have the right under GDPR to:

• Rectification — request correction of inaccurate personal data
• Restriction — request that we limit how we process your data in certain circumstances
• Portability — receive your personal data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Lodge a complaint — file a complaint with your local data protection authority (supervisory authority) if you believe your data has been mishandled

To exercise any of these rights, contact us at the address below.

9. Children's privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If a parent or guardian submits e-ticket information on behalf of a minor traveler, the parent or guardian is responsible for providing that data and consents to its processing under this policy. If you believe we have inadvertently collected data from a child without appropriate consent, please contact us and we will promptly delete it.

10. Data controller

The data controller responsible for your personal data is:

Caribbean Travel Tours LLC, operating as ExploreDomRep
Email: support@exploredomrep.com

11. Contact

For privacy-related questions, data requests, or to exercise your rights under GDPR or other applicable privacy laws, contact us at: support@exploredomrep.com

We aim to respond to all data rights requests within 30 days.