PRIVACY POLICY

Last updated: August 2, 2026

Route to Explore (brand name) is operated in Puerto Rico.
This policy explains what personal information is collected through this website and in the course of providing transportation and concierge services, why it is collected, how long it is kept, and what rights you have over it.

1. Information collected

When you book a service Name, e-mail address, phone number, and the details of the service you are booking.

When you pay Payments are handled by third-party payment processors. Card details are
entered directly with those providers and are never received or stored by Route to Explore.
Only the transaction confirmation and amount are retained.

When you contact us Name, e-mail address, phone number, and the content of your message.

When you use this website With your consent, analytics tools collect information about how the
site is used, including pages visited, device and browser type, and how you arrived at the site.
This information is used to understand how the site is used and to improve it.

When you complete a survey Responses to survey questions accessed through a QR code,
collected for market research. These responses are not linked to a booking.

During the service Vehicles are equipped with cameras that record video and audio for the safety and
security of passengers and driver. This is disclosed in the Release of Liability and Assumption of Risk Waiver,
which you agree to at the time of booking.

Not collected Personal information about individual passengers other than the person making the booking.
No information is knowingly collected about children through any form on this site.

2. Why this information is collected, and the legal basis
 

Providing and managing the service you booked — performance of a contract.
 

Contacting you about your booking — performance of a contract.
 

Processing payments and issuing receipts — performance of a contract, and legal obligation.
 

Meeting tax and accounting record-keeping requirements — legal obligation.
 

Safety and security recording inside the vehicle — legitimate interest in the safety of
passengers and driver, and in evidence in the event of an accident or dispute.
 

Website analytics — consent, given through the cookie banner. Where consent is not given, aggregate traffic estimates that do not identify individual visitors are produced on the basis of a legitimate interest in understanding overall use of the site.
 

Marketing communications, where applicable — consent, withdrawable at any time.
 

Responding to your enquiries — legitimate interest in responding to those who contact us.
 

Consent, where it is the basis, can be withdrawn at any time. Withdrawing it does not affect processing carried out before the withdrawal.

3. How long information is kept

Booking and contact details: two years from the date of the service, after which they are deleted.

Transaction and accounting records: for as long as required by applicable tax and accounting obligations.
These records document amounts and dates and are kept separately from any marketing use.

Vehicle recordings: footage is retained only for a short period and is automatically overwritten in the ordinary
course of operation. Where a specific incident occurs, relevant footage may be retained for as long as
necessary to resolve the matter and is deleted once concluded.

Enquiries that do not result in a booking: two years from the last contact.

Survey responses: retained in aggregated form for market research. Responses are not linked to

identifiable individuals.

Marketing subscriptions: until you unsubscribe.

4. Who information is shared with

Personal information is not sold, rented, or traded.

It is shared only with the service providers necessary to operate the business, which fall into the

following categories:
 

• Website hosting and booking platform

• Payment processors

• Analytics providers, subject to your consent
   

Information may also be disclosed where required by law, by a court order, or by a competent authority,
or where necessary to establish or defend a legal claim.

Each of these providers processes information under its own privacy terms and applicable data protection commitments. Details of the specific providers used are available on request.

5. International transfers

Route to Explore operates in Puerto Rico, a territory of the United States.

If you are located in the European Economic Area or the United Kingdom, information you provide is
transferred to and processed in the United States.

The service providers described above maintain their own frameworks for such transfers.
Where transfers are made, they rely on the mechanisms those providers have in place under applicable
data protection law.

6. Your rights

Depending on where you are located, you may have the right to:
 

• Request a copy of the personal information held about you

• Ask for inaccurate information to be corrected

• Ask for your information to be deleted, where there is no legal obligation to retain it

• Object to or ask for a restriction on certain processing

• Receive your information in a portable format

• Withdraw consent, where consent is the basis for processing

• Lodge a complaint with a supervisory authority in your country
   

Some categories of information are subject to legal limits on access, including where providing a copy

would disclose the personal information of another person, or where the information forms part of an

ongoing claim or legal proceeding. Where a limit applies, you will be told that it does and why.

To exercise any of these rights, write to contact@routetoexplore.com.

Requests are answered within one month. Verification of identity may be requested before a request
is acted on. If you are in California, you may also request disclosure of the categories of personal information collected
and the purposes for which it is used, and request its deletion.

Personal information is not sold, and requests are handled without any difference in service or price.

7. Cookies and similar technologies
 

This site uses cookies. Cookies necessary for the site to function are set automatically. Cookies used for analytics and marketing are set only after you accept them through the cookie banner.

Where you do not accept, limited information about your visit is still received by the analytics provider in a form that does not identify you and does not rely on cookies. It is used only to produce aggregate estimates of overall site traffic, and is handled in accordance with the preference you indicated.

You can change or withdraw your choice at any time through the cookie settings on this site, or by clearing cookies in your browser.

8. Security

Reasonable technical and organisational measures are taken to protect the information held.
No system can be guaranteed entirely secure, and information is provided at your own risk.

9. Children

Services are booked by adults. The person making a booking must be at least 18 years old.
No personal information is knowingly collected from children through this website.
If you believe a child's information has been provided through a form on this site, write to contact@routetoexplore.com and it will be deleted.

10. Changes to this policy

This policy may be updated. The date at the top indicates when it was last revised.
Material changes will be reflected on this page.

 

11. Contact

Questions about this policy, or requests concerning your information, can be sent to contact@routetoexplore.com.
Data controller: Amarylis González, San Juan, Puerto Rico.

12. Governing law

This policy is governed by the laws of the Commonwealth of Puerto Rico,

without prejudice to rights available to you under the data protection laws of your own country.