Privacy

Privacy Policy

Last Updated — September 19, 2026

Roatan Events S.A. ("we", "us", or "our") operates https://dmcroatan.com under the brand DMC Roatán. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit the site, send a planning request, or otherwise contact us. It is written for visitors and business contacts in the United States — including California and other states with consumer privacy laws — and for anyone else who uses the site.

Scope

This policy applies to personal information we collect through dmcroatan.com, our contact and proposal form, email to [email protected], and phone. It does not apply to third-party websites we link to (including Instagram, Facebook, and LinkedIn). Those services have their own policies.

Information We Collect

We collect information you choose to give us and limited technical data created when the site is used.

Identifiers you submit on the planning form: full name, company or organization, email address, and phone number if you provide one.
Event details: event type, estimated group size, preferred dates, how you heard about us, and the message you write.
Communications you send by email or phone, including the contents of those messages.
Technical and log data created by our hosting provider when you load a page or submit the form. That may include IP address, browser type, date and time, referring URL, and pages requested. An IP address can suggest an approximate location. We do not collect precise geolocation (GPS) and we do not run a separate advertising or analytics pixel on this site today.
Cookies and similar technologies that are strictly necessary to operate and secure the site (for example, to deliver pages and process a form submission). We do not use third-party advertising cookies and we do not sell browsing data.

How We Use Your Information

We use personal information only for these business purposes.

To receive, review, and reply to planning requests and proposals.
To communicate with you about your inquiry, dates, venues, and support.
To operate, secure, and troubleshoot the website and the lead form.
To keep records of a request as needed to deliver the service and meet legal, tax, or accounting duties.
To detect fraud, spam, and abuse (including a hidden honeypot field on the form that must stay empty).
We do not use form submissions to build a public marketing list.

Legal Bases

If a privacy law requires a legal basis (including the GDPR, if it applies to you), we rely on: taking steps at your request before a contract (your planning inquiry); our legitimate interests in running a destination-management business and securing the site; consent where you email us or submit optional fields; and legal obligation where we must keep or disclose a record.

Data Sharing

We do not sell your personal information. We disclose it only as needed to run the service or as the law requires.

Service providers who process data on our instructions. Lead emails are sent through Brevo (Sendinblue) so the request reaches our planning inbox. Our website host stores server logs needed to operate the site.
Legal authorities when we are required to respond to a lawful request.
Professional advisers (for example counsel or accountants) under confidentiality, when needed to operate the business.
A buyer or successor if we transfer the business, limited to information needed for that transaction and subject to this policy or equivalent protection.
We do not share personal information for cross-context behavioral advertising. We do not disclose it to business partners for their own marketing without your explicit direction.

United States Privacy Rights

If you are a resident of California or another U.S. state with a consumer privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, and similar statutes), you may have some or all of the rights below. We honor those rights to the extent the law applies to our business and to your information.

Right to know / access: ask what categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
Right to correct inaccurate personal information we hold about you.
Right to delete personal information, subject to exceptions (for example, completing a request you asked us to handle, or records we must keep by law).
Right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising. If that changes, we will update this policy and provide a way to opt out.
Right to limit use of sensitive personal information. We do not collect Social Security numbers, financial account logins, precise geolocation, or other sensitive identifiers through this site.
Right to data portability, where the applicable law provides it.
Right to non-discrimination: we will not deny goods or services or charge a different price because you exercised a privacy right.
California "Shine the Light" (Civil Code § 1798.83): we do not disclose personal information to third parties for their direct marketing. You may still email us to ask about our practices.
Authorized agents: a person you authorize may submit a request on your behalf. We may need proof of your identity and of their authority before we act.

Notice at Collection

In the last 12 months we have collected the categories listed in "Information We Collect": identifiers, professional or employment information (company), commercial information related to an event you want us to plan, and internet or electronic-network activity from server logs. We collect that information from you and from your device or browser when you use the site. We use it for the purposes in "How We Use Your Information." We disclose it to the service-provider categories in "Data Sharing." We do not sell it and we do not share it for cross-context behavioral advertising. We keep it only as long as described under Retention.

Retention

We keep a planning request and related correspondence for as long as we need it to respond, prepare a proposal, and deliver a program if you book with us, and then for a limited period as required for legal, tax, or dispute purposes. Server logs are kept for a short operational period set by our host. When we no longer need the information, we delete it or de-identify it.

Data Security

We use administrative, technical, and physical safeguards appropriate to a small destination-management company, including HTTPS on the website, access limited to the planning team, and delivery of form submissions to a controlled inbox. No method of transmission or storage is completely secure. If we believe a breach has affected your personal information, we will notify you and regulators as required by law.

Cookies

We use cookies or similar technologies only as needed to operate the site. You can block or delete cookies in your browser. If you do, some pages or the form may not work as intended. We do not respond to browser "Do Not Track" signals at this time because there is no common industry standard for them; we also do not use third-party ad trackers that those signals were designed to limit.

Children's Privacy

This site is for business planners and adult travelers. It is not directed to children under 16, and we do not knowingly collect personal information from children under 13 (the U.S. COPPA threshold) or under 16. If you believe a child has submitted information, email us and we will delete it.

International Transfers

We are based in Roatán, Honduras. If you are in the United States or another country, your information is transferred to Honduras and may be processed by providers in the European Union or other countries (for example, Brevo). Those countries may not have the same privacy laws as your home jurisdiction. We transfer only what we need to handle your request and to operate the site.

How to Exercise Your Rights

Email [email protected] with the subject line "Privacy Request." Tell us which right you want to use and enough detail to find your information (for example, the email you used on the form). We will verify your identity before we disclose or delete data. We will respond within the time the applicable law requires — generally 45 days under California law, with a permitted extension if needed. If we deny a request, we will explain why and how you may appeal where the law gives you that right.

Changes to This Policy

We may update this Privacy Policy when our practices, providers, or the law change. The "Last Updated" date at the top will change when we do. The revised policy applies to information we collect after it is posted and to information we already hold, to the extent the law allows.