Your data
Privacy Notice
Draft · attorney review pending
Lux Tropical Rides LLC · Bayamón, Puerto Rico · Effective October 12, 2026
This notice explains what we collect when you visit this site, book a vehicle or chat with us, why we collect it, who receives it, and what you can ask us to do.
1. What we collect
When you book:
- Full legal name, date of birth, phone, email, home or hotel address.
- Driver's licence number and photos of the front and back of your licence.
- The same details for a second driver, if you add one. You confirm that person agreed to share them.
- Your answers in the booking (vehicle, dates, times, pickup place, prior Can-Am experience).
- Your electronic signature and initials, with the date, time, time zone and a digital fingerprint of the signed document.
- Card details. You type your card into the booking page so that LUX can match it at pickup. Your full card number and security code never leave your device. We receive only the card brand, the last four digits and the expiry date.
When you write to us: your WhatsApp number, name and messages, or what you send us on Instagram.
When you browse: your device's IP address and basic technical data that any website receives; your language and cookie choices, saved only in your browser.
2. Why we use it
- To confirm your identity and age (21+) and that you hold a valid licence.
- To prepare, sign and keep your rental agreement.
- To take the security deposit and payment, and to charge tolls, fines, damage or late fees your agreement allows.
- To contact you about your booking.
- To handle claims, prevent fraud and meet legal and tax duties.
- To answer your questions.
We use booking details only for your rental and the purposes above. We do not sell your personal information, and we do not use your licence photos for facial recognition.
3. Who receives it
We share data only with the companies that help us run the service:
- Cloudflare — hosts this site and the booking service, and keeps your signed agreement and licence photos in a private account.
- Google (Drive and Gmail) — LUX's business account, where a copy of your signed agreement and licence photos may also be kept and delivered to our team.
- WhatsApp and Instagram (Meta) — when you choose to message us there.
- An AI service provider — runs Elena, our AI concierge on WhatsApp. Messages you send Elena are processed by this provider to write her replies.
- OpenStreetMap — the map images on the Home and Routes pages are loaded from its servers, which receive your IP address.
- Google Fonts, Cloudflare (cdnjs) and jsDelivr — deliver fonts and code files to your browser and receive your IP address.
- Analytics and the Meta Pixel — only if you accept those cookies. See section 8.
We may also disclose information to the police, courts, traffic or toll authorities, our insurers and our legal advisers when the law requires it or to protect our rights, for example after an accident, a fine or an unreturned vehicle.
These companies are in the United States and may process data in other countries.
4. How long we keep it
We keep licence photos and licence numbers for 12 months after the vehicle is returned, then delete them. We keep your signed agreement and booking and payment records for 4 years after the rental, or longer if a claim or a legal duty requires it. Bookings that are started and not completed are deleted within 30 days.
5. How we protect it
The site uses encrypted connections. Your full card number and security code stay on your device. Signed agreements and licence photos are kept in a private business account that only authorised staff can open. No system is perfectly secure. If a security incident affects your personal information, we will notify you and the authorities as Puerto Rico law requires (Law 111-2005).
6. Your choices and rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it;
- delete it.
How to ask: message us on WhatsApp at +1 (939) 577-2222 with the name and phone or email used in your booking. We will confirm it is you and answer within 30 days. We may need to keep some records, such as a signed agreement, for as long as the law or an open claim requires; if so, we will tell you which and why.
7. Age
Our service is for adults. Every renter and driver must be 21 or older. We do not knowingly collect information from anyone under 18. If you believe a minor sent us information, contact us and we will delete it.
8. Cookies
We use browser storage that is needed for the site and booking to work and to remember your language and cookie choice. Analytics and marketing tools are off unless you turn them on. You can change your choice at any time from "Cookie settings" at the bottom of every page.
9. Visitors from California
We do not sell personal information. If you accept marketing cookies, Meta receives information about your visit to show you our ads; you can switch that off in "Cookie settings". California residents may ask to know, correct or delete their information as described in section 6, and will not be treated differently for asking.
10. Visitors from the European Union and the United Kingdom
We are based in Puerto Rico and our service is delivered there. If data-protection law in the EU or UK applies to you, we process your data to perform your rental contract, to meet legal duties, for our legitimate interest in preventing fraud and handling claims, and, for analytics and marketing cookies, only with your consent. Your data is processed in the United States. You may ask for access, correction, deletion, restriction or a copy of your data, object to processing, withdraw consent, and complain to your local data-protection authority.
11. Changes
We will post any change on this page with a new date. If a change is important, we will tell you before it applies to you.
12. Contact
Lux Tropical Rides LLC · Bayamón, Puerto Rico · WhatsApp +1 (939) 577-2222 · Instagram @luxtropicalrides