Introduction

La Roja Travel ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or book our tour services, and how our connected business mailbox supports booking operations.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

Name and email address
Payment information (processed securely via Stripe)
Communication preferences
Any information you provide in contact forms or inquiries

Automatically Collected Information

When you visit our website, we may automatically collect:

Browser type and version
Operating system
Pages visited and time spent
Referring website addresses
Campaign parameters and advertising click identifiers when present

How We Use Your Information

We use the information we collect to:

Process your tour bookings and payments
Send booking confirmations and tour information
Respond to your inquiries and requests
Improve our website and services
Send promotional communications (with your consent)

Connected Business Gmail

An authorized account owner may connect our business Gmail to the La Roja Travel admin workspace. This feature uses read-only access to classify emails, prepare booking candidates from platform notifications, and link related customer correspondence. A team member reviews each candidate before it becomes a booking or changes an existing booking.

Google's permission allows reading the entire connected mailbox; it cannot be restricted to order emails at the authorization step. We process message headers, labels and content, which may include names, contact details and booking information. Email messages embedded in attachments may be processed as source evidence. This integration does not send replies, change Gmail labels or delete Gmail messages.

Source text previews are kept for seven days. Message metadata and review candidates are kept for 180 days after collection. Confirmed platform bookings, their operational arrangements and review history are retained until at least 180 days after the scheduled trip. We do not retain the original downloaded email file or other attachments. Infrastructure backups have a separate retention period and may outlast these application records.

Authorized administrators may also import an exported business Google Calendar file to reconcile historical tour bookings. These private calendar snapshots, including event descriptions and guest details, are retained for 30 days. Importing a file does not grant additional Google account access or modify Google Calendar. Confirmed platform bookings use the retention period described above.

Mailbox access credentials are encrypted on our server. Email content and candidates are available only to authorized administrators; operations staff can access confirmed bookings for arranging tours. Our hosting and storage providers process this data to operate the workspace. This integration does not send Gmail data to AI services or use it for advertising, sale or general AI model training.

The account owner can revoke access through Google Account settings. Administrators can also use Disconnect in the workspace to revoke this application's access and remove the stored connection. Disconnecting stops collection; it does not erase reviewed bookings or records that remain within their retention period. Contact us using the details below to request deletion of stored data.

La Roja Travel's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Payment Processing

All payment transactions are processed through Stripe, a secure third-party payment processor. We do not store your full credit card details on our servers. Please review Stripe's Privacy Policy for more information.

Data Sharing

We do not sell your personal information. We may share your data with:

Service providers (payment processing, email delivery)
Legal authorities when required by law

Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Opt-out of marketing communications

Cookies

We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences.

When you arrive from a tagged campaign or external referral, we may store first-touch campaign information in your browser for up to 90 days and carry it into the booking record. This can include UTM parameters, advertising click identifiers, the first landing page, and the referring website origin and path. We use Google Analytics to measure checkout and purchase events. We do not send your name, email, phone number, payment-card details, or raw AI conversation content in these analytics events.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: info@larojatravel.com