Privacy Policy — South Dust Rides

South Dust Rides SAS (“we”, “us”) respects your privacy. This policy explains what personal data we collect, how we use it, and your rights. It covers our Website southdustrides.com and our Trips.

1. Who we are (Data Controller)

South Dust Rides SAS, Avenida Brasil 2986, Montevideo, Uruguay. For any privacy question or request, contact info@southdustrides.com.

2. What data we collect

Contact & enquiry data: name, email and message when you contact us or sign up to our newsletter.
Booking data: name, email, country, room preference, flight and arrival details, dietary needs, and information needed to run the Trip.
Health & insurance data: medical, dietary or insurance details you provide so we can keep you safe. This may be sensitive data, processed only to operate the Trip and with your consent.
Payment data: payments are processed by our payment provider. We do not store your full card details; we receive confirmation and limited transaction data.
Technical & usage data: aggregate page views and traffic sources. Our analytics is first-party and does not use cookies (see our Cookie Policy).

3. How we use your data and legal basis

To respond to enquiries and manage your Booking — performance of a contract.
To operate the Trip safely, including dietary and medical needs — your consent and legitimate interest / vital interests.
To process payments — performance of a contract.
To send you updates about your Trip — performance of a contract.
To send marketing (e.g., newsletter about future rides) — your consent; you can unsubscribe at any time.
To improve and secure the Website and comply with law — legitimate interest / legal obligation.

We share data only as needed with service providers acting on our behalf: our payment processor (PayPal), our email and newsletter provider (Resend), our hosting provider (Cloudflare), our anti-spam provider (Cloudflare Turnstile), and Trip suppliers (accommodation, transport) strictly to deliver your Trip. Our website analytics is first-party and does not track you across other websites. We do not sell your personal data.

5. International transfers

Some providers may process data outside Uruguay or your country. Where required, we put appropriate safeguards in place for such transfers.

6. Data retention

We keep personal data only as long as necessary for the purposes above and to meet legal, accounting and tax obligations, then delete or anonymize it.

7. Your rights

Depending on your location (including under Uruguay’s Law No. 18.331 and the EU GDPR if you are in the EU), you may have the right to access, correct, delete, restrict or object to processing of your data, to withdraw consent, and to data portability. To exercise any right, email info@southdustrides.com. You may also complain to your local data-protection authority (in Uruguay, the URCDP).

8. Cookies

Our Website uses only strictly necessary cookies, as described in our Cookie Policy.

9. Children

Our Website and Trips are intended for adults (18+). We do not knowingly collect data from children.

10. Changes

We may update this policy; the “Last updated” date shows the latest version.