Our policies and procedures
Privacy Policy
We use Your Personal Data to provide and improve the Service.
Privacy Policy
Last updated: September 02, 2026
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We process Your Personal Data in accordance with applicable data protection laws, including the European Union / UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).
Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access Our Service or parts of Our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to Discover Sal Tours.
- Consumer under CCPA/CPRA means a natural person who is a California resident.
- Cookies are small text files placed on Your computer or mobile device by a website, storing browsing history, preferences, and tracking tags.
- Data Controller (under GDPR) refers to the Company as the legal entity that determines the purposes and means of processing Personal Data.
- Personal Data (or Personal Information) is any information that relates to an identified or identifiable individual, as defined under GDPR, CCPA/CPRA, and CalOPPA.
- Service refers to the Website.
- Service Provider (or Processor) means any natural or legal person who processes data on behalf of the Company.
- Usage Data refers to data collected automatically from the Service infrastructure (for example, page visit duration or IP address).
- Website refers to Discover Sal Tours, accessible from discoversaltours.com.
- You means the individual accessing or using the Service, or the entity on whose behalf such individual accesses the Service.
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact, identify, or fulfill tour bookings for You:
- First name and last name
- Email address
- Phone number (including WhatsApp contact details where applicable)
- Address, State, Province, ZIP/Postal code, City
- Tour booking details, dates, accommodation/hotel details for pickups
- Payment details and transaction history
Usage Data
Usage Data is collected automatically when using the Service. It includes Your Device’s IP address, browser type, browser version, pages visited, time and date of visit, time spent on pages, unique device identifiers, and diagnostic data.
Detailed Cookie Policy & Consent Management
We use Cookies, Web Beacons, and local storage technologies to power our Website, maintain security, and analyze traffic.
Categories of Cookies We Use
- Strictly Necessary / Essential Cookies
- Purpose: Essential for navigation, account authentication, and tour booking execution.
- Legal Basis: Legitimate Interest / Performance of Contract (Consent not required).
- Functionality Cookies
- Purpose: Remembers choices You make (e.g., preferred language, currency, login states).
- Legal Basis: Consent / Legitimate Interest.
- Analytics & Performance Cookies (Google Analytics 4)
- Purpose: Measures traffic, interaction statistics, and page performance to help us improve the site.
- Legal Basis: Consent.
- Security Cookies (Google reCAPTCHA)
- Purpose: Analyzes hardware/behavioral signals to block automated spam and bot attacks on contact and booking forms.
- Legal Basis: Legitimate Interest in protecting site infrastructure.
Cookie Preferences & Managing Consent
When You first visit our Website, a Cookie Banner allows You to Accept All, Reject Non-Essential, or Customize Your cookie choices.
- Opt-Out / Change Preferences: You can update Your consent settings at any time by clicking the “Cookie Preferences” link in our website footer or by adjusting Your web browser settings to block or delete cookies.
- Google Analytics Opt-Out: You may install the official Google Analytics Opt-out Browser Add-on.
- Google Privacy & Terms: Google reCAPTCHA and Analytics operate under Google’s policies. Learn more at Google Privacy & Terms.
Legal Bases for Processing (GDPR Compliance)
If You are located in the European Economic Area (EEA) or the United Kingdom (UK), We collect and process Your Personal Data under the following legal bases:
- Performance of a Contract: Processing is necessary to fulfill tour bookings, payments, and customer support.
- Your Consent: Processing occurs when You give explicit consent (e.g., opting into marketing newsletters, accepting non-essential cookies).
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., website security via reCAPTCHA, fraud prevention, business operations).
- Legal Compliance: Processing is necessary to comply with statutory obligations (e.g., tax, accounting, and regulatory reporting).
California Privacy Rights (CCPA / CPRA & CalOPPA Compliance)
This section applies solely to California residents (“Consumers”).
Categories of Personal Information Collected (Past 12 Months)
We have collected the following categories of Personal Information:
- Identifiers: Real name, email address, phone number, IP address, account login details.
- Commercial Information: Products or tours purchased, booking history, payment records.
- Internet/Network Activity: Browsing history, search history, interactions with our Website.
- Geolocation Data: Physical location for hotel pickups or region-level IP data.
Consumer Rights Under CCPA / CPRA
If You are a California resident, You hold the following rights:
- Right to Know / Access: Right to request details on the categories and specific pieces of Personal Information We collected, used, and disclosed about You in the past 12 months.
- Right to Delete: Right to request erasure of Your Personal Information, subject to certain legal exceptions (e.g., completing transactions or tax record retention).
- Right to Correct: Right to request correction of inaccurate Personal Information.
- Right to Opt-Out of Sale or Sharing: We do NOT sell Your Personal Information, nor do We share Your Personal Information for cross-context behavioral advertising.
- Limit Use of Sensitive Personal Information: We do not collect or process Sensitive Personal Information for purposes other than providing requested services.
- Non-Discrimination: You will not receive discriminatory treatment or diminished service quality for exercising Your privacy rights.
“Do Not Track” (DNT) & Global Privacy Control (GPC) Signals (CalOPPA)
Under CalOPPA, we disclose that our Website honors recognized browser-based opt-out preference signals, such as the Global Privacy Control (GPC). Where detected, non-essential cookies will be disabled automatically.
Use and Disclosure of Your Personal Data
We use and disclose Personal Data for the following operational purposes:
- Tour Delivery: Processing reservations, executing transfers, and communicating pickup details.
- Customer Support: Resolving inquiries, support tickets, and scheduling changes.
- Security & Fraud Prevention: Utilizing Google reCAPTCHA to prevent malicious activity.
- Service Providers: Sharing necessary data with trusted vendors (payment gateways, IT hosting, transport operators, messaging providers).
- Legal Compliance: Disclosing data to public authorities or law enforcement when legally required.
Text Messages (SMS / WhatsApp) Privacy Notice
If You opt in to receive text (SMS) or WhatsApp communications from Us:
- Personal Information collected for text messaging (phone number, consent logs) is used strictly for booking updates, customer support, and operational notices.
- No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes.
- You may opt out at any time by replying STOP or contacting us directly.
Data Retention Policy
Personal Data is retained only for as long as necessary to fulfill the purposes set out in this Privacy Policy:
| Category | Retention Period | Primary Purpose |
| Account Information | Duration of account + up to 24 months post-closure | Account maintenance & dispute resolution |
| Booking & Financial Data | Up to 7 years (or as mandated by local tax law) | Legal compliance, accounting, & tax audits |
| Customer Support Records | Up to 24 months from ticket resolution | Service quality & legal defense |
| Analytics Data (GA4) | Up to 14 months | Aggregated trend evaluation |
| Security Logs | Up to 24 months | System diagnostics & fraud prevention |
International Data Transfers
Your information may be processed outside of Your state, province, or country—including in Cape Verde and on third-party cloud servers in the United States and EU.
Where transfers across international borders occur (e.g., transferring EU personal data outside the EEA), We implement recognized protection frameworks, such as Standard Contractual Clauses (SCCs), to ensure Your data remains protected.
Exercising Your Privacy Rights
To exercise Your rights under GDPR, CCPA/CPRA, or CalOPPA:
- Email Request: Send a request to [email protected].
- Verification: To protect Your privacy, We must verify Your identity before fulfilling requests. You may be asked to provide details matching our account records.
- Authorized Agent: California residents may designate an authorized agent to submit requests on their behalf by submitting written authorization signed by the Consumer.
Children’s Privacy
Our Service is not directed to individuals under the age of 16. We do not knowingly collect Personal Information from children under 16 without verified parental/guardian consent. If You learn that a child has provided us with Personal Information, please contact us immediately for prompt deletion.
Links to External Websites
Our Website may contain links to third-party sites. We do not control and are not responsible for the privacy policies, content, or practices of third-party websites.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. Changes become effective when posted on this page with an updated “Last updated” date. For significant updates, We will notify You via email or a prominent banner notice on our Website.
Contact Us
If You have questions, complaints, or wish to exercise Your privacy rights under GDPR, CCPA/CPRA, or CalOPPA, contact us at:
- By Email: [email protected]
- By Phone: +238 586 7223
- Website: discoversaltours.com