Privacy Policy

Last updated: January 13, 2025

1. Introduction

Welcome to ChulaVista.io ("we," "our," or "us"). We are committed to protecting your privacy and handling your information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website located at https://chulavista.io (the "Website").

Please read this Privacy Policy carefully. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service.

2. Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide to us when you:

Contact us through forms or email
Subscribe to newsletters or updates
Participate in surveys or feedback forms
Comment on our content
Report issues or request support

This information may include your name, email address, phone number, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:

Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers
Usage Information: Pages visited, time spent on pages, click patterns, referring/exit pages, search queries, and dates/times of access
Location Information: General geographic location based on IP address
Technical Information: Screen resolution, language preferences, and JavaScript enabled/disabled status

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect and store information about your interactions with our Website. Cookies are small text files stored on your device that help us remember your preferences and improve your experience. For detailed information about our cookie usage, please see our Cookie Policy section below.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Website Operation

Provide, maintain, and improve our Website and services
Customize your experience and deliver relevant content
Respond to your inquiries and provide customer support
Monitor and analyze Website usage and trends
Detect, prevent, and address technical issues or security threats
Enforce our Terms of Service and protect our legal rights

3.2 Analytics and Performance

We use analytics services to understand how visitors use our Website:

Google Analytics: We use Google Analytics to collect and analyze Website usage statistics, track user behavior, measure Website performance, and improve user experience. Google Analytics uses cookies to collect anonymous data including page views, session duration, bounce rates, traffic sources, and demographic information. This data helps us understand visitor patterns and optimize our content. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
GetYourGuide Analytics: We use GetYourGuide analytics to track interactions with activity booking widgets on our Website. This includes data about widget views, clicks, and booking conversions. This information helps us understand engagement with sponsored activities and improve our content recommendations.

3.3 Marketing and Communications

Send you newsletters, updates, and promotional communications (with your consent)
Inform you about new features, content, or services
Conduct marketing research and surveys
Target advertising and measure advertising effectiveness

4. Third-Party Services and Integration

4.1 GetYourGuide Integration

Our Website integrates with GetYourGuide to display activity booking widgets. When you interact with these widgets, GetYourGuide may collect information about your interaction, including:

Widget views and impressions
Clicks and interactions with booking options
Referral source and user session data
Device and browser information

This data is used by GetYourGuide to facilitate bookings and measure marketing performance. GetYourGuide has its own privacy policy governing their data collection and use practices. We encourage you to review GetYourGuide's Privacy Policy.

4.2 Third-Party Service Providers

We may share your information with trusted third-party service providers who perform services on our behalf, including:

Website hosting and maintenance
Data analytics and reporting
Email marketing platforms
Customer support tools
Payment processing (if applicable)
Security and fraud prevention

These service providers are contractually obligated to use your information only as necessary to provide their services and must maintain reasonable security measures.

5. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your personal information based on the following legal grounds:

Consent: You have given explicit consent to the processing
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services and preventing fraud
Legal Obligation: Processing is required to comply with applicable laws and regulations
Contract Performance: Processing is necessary to perform a contract with you

6. Data Sharing and Disclosure

We may share your information in the following circumstances:

With Your Consent: When you have given us explicit permission to share your information
Service Providers: With trusted third parties who assist us in operating our Website and providing services
Business Transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy proceeding
Legal Requirements: When required by law, court order, or government regulation
Protection of Rights: To protect our rights, property, safety, or that of our users or others
Aggregated Data: We may share aggregated, anonymized data that cannot identify you personally

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.

8. Data Security

We implement reasonable technical, administrative, and physical security measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include:

SSL/TLS encryption for data transmission
Secure hosting infrastructure
Regular security assessments and updates
Access controls and authentication procedures
Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Your Privacy Rights

9.1 Rights Under GDPR (European Users)

If you are located in the EEA, you have the following rights:

Right of Access: Request copies of your personal data
Right of Rectification: Request correction of inaccurate or incomplete data
Right of Erasure: Request deletion of your personal data under certain circumstances
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Request transfer of your data to another service
Right to Object: Object to processing of your data based on legitimate interests
Right to Withdraw Consent: Withdraw consent for data processing at any time

9.2 Rights Under CCPA (California Users)

If you are a California resident, you have the following rights:

Right to Know: Request disclosure of categories and specific pieces of personal information collected
Right to Delete: Request deletion of personal information we have collected
Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
Right to Non-Discrimination: Exercise your rights without discrimination

9.3 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing certain requests.

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies to enhance your browsing experience, analyze Website traffic, and personalize content.

10.1 Types of Cookies We Use

Essential Cookies: Required for basic Website functionality and security (e.g., session management, fraud prevention)
Analytics Cookies: Used to collect information about how visitors use our Website (Google Analytics, GetYourGuide analytics)
Functional Cookies: Remember your preferences and settings (e.g., language, region)
Advertising Cookies: Track your browsing behavior to deliver relevant advertisements (if applicable)

10.2 Third-Party Cookies

We may allow third parties to set cookies on our Website for the following purposes:

Google Analytics: Web analytics and performance measurement
GetYourGuide: Activity booking widget functionality and analytics
Social Media Platforms: Social sharing and integration features

10.3 Cookie Management

You can control or delete cookies through your browser settings. Most browsers accept cookies by default, but you can typically configure your browser to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect certain Website functionality. You can also use our cookie consent manager to control specific types of cookies.

11. Children's Privacy

Our Website is not intended for children under the age of 13 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete such information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. By using our Website, you consent to the transfer of your information to these countries. We take appropriate measures to ensure your information receives adequate protection, including implementing standard contractual clauses where applicable.

13. Links to Third-Party Websites

Our Website may contain links to third-party websites, including travel booking platforms, government resources, and other services. We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on this page with a revised "Last updated" date. Your continued use of our Website after such changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Data Protection Officer

For data protection matters, including GDPR inquiries, please contact our Data Protection Officer using the contact information provided below.

Manage Your Cookie Preferences

You can manage your cookie preferences at any time by clicking the button below. This will open our cookie preference center where you can enable or disable different types of cookies.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Website: ChulaVista.io
Email: privacy@chulavista.io (for privacy inquiries)
Website Contact: https://chulavista.io (use contact form or support channels)
Legal Entity: PHO Solutions LLC
Jurisdiction: Wyoming, United States
Registered Address: 30 N Gould St STE R, Sheridan, WY 82801

We will make every effort to respond to your inquiry promptly and address your concerns.

17. Wyoming State Law Compliance

As a Wyoming LLC, we comply with all applicable Wyoming state laws regarding data privacy and protection, including Wyoming's data breach notification requirements. We also comply with relevant federal laws, including the Children's Online Privacy Protection Act (COPPA), the Federal Trade Commission Act (FTC Act), and any industry-specific regulations that may apply.

18. Acknowledgment

By using our Website, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.

This Privacy Policy is effective as of January 13, 2025. For questions about this policy, please contact us using the information provided above.