Twelve27 Excursions (“Twelve27”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you visit our website, submit an inquiry or book an excursion, how we use and share that information, how long we keep it, and the rights you have over it.
1. Who We Are
Twelve27 Excursions operates guided excursions and related travel experiences from Sosúa, Puerto Plata, Dominican Republic, and is the controller responsible for the personal information described in this policy. Contact details are in Section 13.
2. Information We Collect
2.1 Information you give us
- Contact details: name, email address, phone number, country of residence and, where relevant, your accommodation or pickup address.
- Booking details: excursion selected, travel dates, number and ages of guests, pickup location and special requests.
- Health and accessibility information: allergies, dietary needs, mobility limitations, pregnancy or medical conditions that you choose to share so we can run an excursion safely. This is sensitive information and we collect it only when you provide it.
- Payment information: billing name, billing address and transaction details. Card numbers are entered directly with our payment provider and are never stored on our servers.
- Correspondence: messages you send us by contact form, email, phone, WhatsApp or social media, including reviews and feedback.
2.2 Information collected automatically
- Device and usage data: IP address, browser type and version, operating system, referring page, pages viewed, time spent and approximate location derived from your IP address.
- Cookies and similar technologies: small files placed on your device, described in Section 5.
2.3 Information from third parties
We may receive information about you from booking partners, online travel agents, review platforms, payment providers and social media platforms where you interact with our pages or advertising.
3. How We Use Your Information
- To respond to inquiries and provide quotations.
- To take, confirm, manage and deliver bookings, including sharing the details a supplier needs to run your excursion.
- To process payments, issue receipts and handle refunds.
- To keep you informed about your booking, including pickup times, meeting points and changes caused by weather or operational conditions.
- To run excursions safely, taking account of the health and accessibility information you have provided.
- To handle complaints, insurance matters and legal claims.
- To improve our website, services and excursion offering, including analysis of aggregated usage data.
- To send marketing communications about our excursions and offers, where you have consented or where we are otherwise permitted to do so. You can withdraw consent at any time.
- To comply with tax, accounting, safety and other legal obligations.
4. Legal Bases for Processing
Where data protection law such as the EU or UK GDPR applies to you, we rely on the following legal bases:
- Performance of a contract — to take and deliver your booking and provide customer support.
- Consent — for marketing emails, non-essential cookies, and the use of health information you volunteer. You may withdraw consent at any time.
- Legitimate interests — to operate and secure our website, prevent fraud, understand how our services are used, and improve what we offer, balanced against your rights.
- Legal obligation — to meet accounting, tax, safety and regulatory requirements.
- Vital interests — to protect someone’s life or safety in a medical emergency during an excursion.
5. Cookies and Tracking
Our website uses cookies and similar technologies to keep the site working, remember your preferences, and understand how the site is used. Broadly, they fall into these categories:
- Strictly necessary — required for core functions such as security, forms, shopping cart and session management. These cannot be switched off.
- Preference — remember choices such as language or previously viewed excursions.
- Analytics — help us measure traffic and improve pages and excursion listings.
- Marketing — used by advertising and social platforms to measure campaigns and show relevant content.
Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may prevent parts of the site, including booking and inquiry forms, from working correctly.
6. Sharing Your Information
We do not sell your personal information. We share it only as described below:
- Excursion suppliers — boat operators, drivers, guides, parks, restaurants and accommodation providers receive the details they need to deliver your excursion, such as name, guest numbers, pickup point and relevant health or dietary needs.
- Payment processors — to take payment and process refunds securely.
- Technology providers — hosting, email delivery, form handling, backup, security and analytics providers acting on our instructions.
- Professional advisers and insurers — where necessary for legal claims, insurance or audit purposes.
- Authorities — where required by law, court order, or to protect the rights, property or safety of guests, staff or the public.
- Business transfers — if our business is sold or reorganised, personal information may transfer to the new owner under the protections of this policy.
7. International Transfers
We operate in the Dominican Republic and use service providers that may store or process data in other countries, including the United States and the European Union. Where information is transferred outside your country, we take reasonable steps to ensure it remains protected by appropriate safeguards and by contractual commitments from our providers.
8. How Long We Keep Information
- Inquiries that do not lead to a booking: up to 24 months from your last contact with us.
- Booking and transaction records: for the period required by applicable tax and accounting law, typically up to 10 years.
- Health and accessibility details: deleted shortly after the excursion is complete, unless needed for an insurance or legal claim.
- Marketing contacts: until you unsubscribe or ask us to delete your details.
- Website analytics: generally retained in aggregated or de-identified form.
9. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, and limiting access to staff and suppliers who need it. No system can be guaranteed completely secure, and any transmission of information over the internet is at your own risk.
10. Your Rights
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete information we no longer need to keep.
- Object to or ask us to restrict certain processing, including direct marketing.
- Receive a copy of information you provided to us in a portable format.
- Withdraw consent at any time, without affecting processing already carried out.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at hello@twelve27excursions.com. We may ask you to verify your identity before we act, and we will respond within the timeframe required by applicable law.
11. Children
Our website and booking services are intended for adults. We do not knowingly collect personal information directly from children under 16. Details about minors travelling in your party are provided by the responsible adult who makes the booking. If you believe a child has provided information directly to us, please contact us and we will delete it.
12. Third-Party Links and Content
Our site links to third-party websites and may embed content such as maps, videos and review widgets. Those providers may collect information about your visit under their own privacy policies, which we do not control. We encourage you to read them.
13. Contact Us
For any question about this Privacy Policy or about how we handle your information:
- Email: hello@twelve27excursions.com
- Phone: +1 987 789 9087
- Address: Sosúa, Puerto Plata, Dominican Republic
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or in the law. The current version is always published on this page, and the “Last updated” date shows when it took effect. Where changes are significant, we will take reasonable steps to notify you.