Effective date: October 13, 2026
This policy explains how Bullet Travels collects and uses your personal data when you visit bullettravels.com, book an excursion or transfer, or contact us by WhatsApp, Telegram, phone or email. We follow Dominican Law 172-13 on the Protection of Personal Data and, for travelers from the European Union and UK, the GDPR principles, and we respect the privacy rights of US residents under applicable state laws.
1. Who is responsible for your data
Bullet Travels, Punta Cana, Dominican Republic — info@bullettravels.com · +1 (829) 282-5168 — is responsible for booking and customer data.
Isla RD Group, LLC (Delaware, USA), our commercial partner, is responsible for payment and transaction records it processes through Stripe. See our Partners page.
2. Data we collect
| Data | Examples |
|---|---|
| Booking data | Name, email, phone/WhatsApp, hotel or pickup location, tour date, number and ages of travelers, special requests |
| Safety data (only if you tell us) | Mobility needs or health information you choose to share so the Operator can keep you safe |
| Identification (only when required) | Name and passport/ID number required by the Navy (Armada) for boat passenger lists |
| Payment data | Amount, date, last 4 digits and card brand, Stripe transaction ID. Full card numbers are handled only by Stripe. |
| Communications | Messages you send us by WhatsApp, Telegram, email or phone |
| Technical data | IP address, browser, device, pages visited, cookies (see our Cookie Policy) |
3. Why we use your data (and legal basis)
- To manage your booking: confirm availability, arrange pickup, send confirmations and payment links (performance of a contract).
- To take payment and issue refunds through Stripe, and to prevent fraud (contract and legitimate interest).
- To keep you safe: share passenger lists and relevant needs with the Operator and authorities (legal obligation and vital interest).
- To answer your questions and handle complaints (legitimate interest).
- To keep accounting and tax records (legal obligation).
- To improve our website with analytics, and to send offers, only with your consent. You can withdraw consent at any time.
We do not sell your personal data.
4. Who we share data with
- Tour Operators and drivers delivering your activity: only name, number of travelers, pickup location/time, phone and relevant needs.
- Isla RD Group, LLC: payment and booking-fee records.
- Stripe (payments) — stripe.com/privacy.
- WhatsApp / Meta and Telegram when you choose to contact us there.
- Hosting and email provider (GoDaddy), and Google (analytics, maps) if you accept those cookies.
- Authorities (Navy, MITUR, tax authorities, courts) when required by law.
5. International transfers
Your data is processed in the Dominican Republic and the United States (Isla RD Group, LLC, Stripe, Google, Meta). These providers use recognised safeguards such as Standard Contractual Clauses for data from the EU/UK.
6. How long we keep data
- Booking and payment records: up to 7 years for tax and accounting purposes.
- Passport/ID numbers for passenger lists: deleted within 30 days after the activity, unless authorities require longer.
- Health or mobility information: deleted within 30 days after the activity.
- Marketing consent: until you unsubscribe.
7. Your rights
Under Law 172-13 and, where applicable, GDPR and US state laws, you can ask to access, correct, delete or object to the use of your data, restrict it, receive a copy (portability), and withdraw consent. Email info@bullettravels.com with the subject “Privacy request”. We answer within 30 days. You may also complain to a data-protection authority in your country.
8. Security
We use HTTPS encryption, Stripe’s PCI-DSS certified checkout, access limited to staff who need it, and strong passwords with two-factor authentication on our accounts. No system is 100% secure; if a breach affects you, we will notify you as required by law.
9. Children
Bookings must be made by adults. We only process data about minors that a parent or guardian provides for their participation in an activity.
10. Changes
We may update this policy and will show the new effective date on this page.