Your information, handled with care

Bates Punta Cana Social Group SRL operates the Punta Cana Project website and platform from Punta Cana, Dominican Republic. In this policy, “Punta Cana Project,” “we,” “us,” and “our” refer to that operator.

This policy applies to visitors, members, event attendees, business representatives, event staff, and people who contact us through the platform.

For questions or privacy requests, contact us at info@puntacanaproject.com. Please do not send payment-card details, passwords, or identity documents unless we specifically request a secure method.

Depending on how you use the platform, we may collect:

• Account data: name, email address, password hash, role, account status, language, city, and country.
• Contact and preference data: phone or WhatsApp number, event interests, saved items, and separate email and WhatsApp choices.
• Event data: reservations, ticket quantity and tier, attendance status, confirmation and single-use check-in codes, inquiries, and check-in history.
• Payment data: price, currency, payment status, PayPal order or capture references, and refund information. PayPal processes payment credentials; we do not store full card or bank-account details.
• Business data: contact person, public business profile, category, location, map link or coordinates, offers, affiliate links, membership status, logos, cover images, and gallery uploads.
• Content you submit: reviews, testimonials, messages, event or business submissions, photos, captions, and other uploads.
• Technical, security, analytics, and engagement data: IP address, browser and device information, timestamps, request logs, authentication records, necessary cookies, and limited records of actions such as opening a partner link or submitting an inquiry. The Google tag uses consent mode and may send cookie-free consent and measurement signals while analytics storage is denied. If you allow analytics cookies, Google Analytics also measures page and session activity, approximate location, and browser or device information. An internal engagement record may be associated with your account when you are signed in; we do not send your Punta Cana Project account identifier to Google Analytics.
• Location data: business or event locations you submit and map interactions. We do not request continuous device location unless a map feature clearly asks for it.

We receive information directly from you, from an administrator or approved business acting for an event, from your use of the platform, and from service providers such as PayPal when they report a payment result or Google when its consent-aware tag operates on the site. Publicly submitted business and event content may also be provided by the relevant organizer or business representative.

We use personal information to:

• Create, authenticate, approve, secure, and support accounts.
• Publish approved events and business listings and manage member offers.
• Process reservations, payments, refunds, QR passes, and single-use event check-ins.
• Send transactional confirmations, receipts, event changes, security notices, and support replies.
• Send optional event announcements or promotions by email or WhatsApp only according to your choices.
• Respond to inquiries, moderate content, prevent fraud or abuse, and enforce platform rules.
• Maintain and troubleshoot the platform and, when you consent, use Google Analytics to understand visits and page usage so we can improve the site. We do not enable Google advertising signals or ad personalization.
• Comply with accounting, tax, legal, and regulatory obligations.

Where a law requires a legal basis, we rely as appropriate on performance of a contract, your consent, compliance with legal duties, and legitimate interests such as operating and protecting the platform. You may withdraw consent without affecting earlier lawful processing.

When you choose a paid event, we create a reservation and send PayPal the amount, currency, transaction reference, event description, and the return and cancellation information needed to complete checkout. PayPal collects and processes your payment credentials under the PayPal Privacy Statement.

PayPal returns transaction information to us through the checkout return and signed webhook notifications. We keep the PayPal order or capture identifier, amount, currency, processing status, timestamps, and refund or reversal status so we can confirm the reservation, issue the QR pass, reconcile payments, investigate disputes, and meet accounting obligations. We do not receive or store your full card number, bank credentials, or PayPal password.

PayPal may carry out its own fraud, risk, identity, or compliance checks as an independent provider. Questions about those checks or PayPal's handling of payment credentials should be directed to PayPal.

Transactional messages needed to provide a service, such as reservation confirmations, payment receipts, QR passes, event changes, password or security messages, are separate from optional marketing.

Email updates and WhatsApp updates use separate, unticked choices. You can change them in account settings, use an unsubscribe method included in an email, reply with a recognized opt-out such as STOP where supported, or contact us. Opting out of marketing does not stop essential service messages about an active account, purchase, reservation, or inquiry.

We do not sell personal information or phone numbers, and consent to receive messages is not a condition of purchasing an event ticket.

We share only what is reasonably necessary with:

• Event organizers and authorized event staff for reservation administration and check-in.
• Approved businesses when you direct an inquiry or booking request to them.
• PayPal and payment-network or fraud-prevention participants used for a transaction.
• IONOS and other hosting, database, email, file-storage, security, and technical support providers used to operate the platform.
• Google Analytics through consent mode, with analytics cookies used only when you allow them and advertising features disabled.
• WhatsApp or another messaging provider when you choose that communication channel.
• OpenStreetMap Foundation when an interactive map requests tiles, and external-media providers when you allow optional embedded media.
• Professional advisers, authorities, or another organization when required by law, to protect rights and safety, or in a legitimate business reorganization.

Service providers may process information under their own terms and privacy notices. We do not authorize event organizers or businesses to use reservation or inquiry data for unrelated marketing without a valid permission.

Approved business information may be public, including the business name, logo, images, description, area, location, contact links, offers, and event links. Approved event listings may show organizer and location details. Reviews, testimonials, and submitted media may be public after moderation.

Member account details and reservation histories are not public by default. Event photography and removal requests are explained in our Event & Media Notice.

We use necessary cookies for authentication, security, checkout continuity, and recording privacy choices. The Google tag loads with analytics and advertising storage denied by default and may send cookie-free consent and measurement signals. If you allow analytics cookies, it measures visits and page usage using first-party analytics cookies while Google advertising signals and ad personalization remain disabled. Optional social media embeds remain blocked unless you allow external media. Leaflet maps request OpenStreetMap tiles when displayed, and opening PayPal, directions, Instagram, WhatsApp, or another external service sends your request to that provider. See our Cookie Policy and use “Cookie settings” in the footer at any time to change a choice.

We keep information only while needed for the purposes described here. Account data is generally retained while an account remains active. Reservation, payment, refund, and check-in records may be retained longer for accounting, fraud prevention, disputes, and legal obligations. Public submissions and uploads remain until removed, replaced, or no longer needed. Security logs and consent records are retained for a limited period appropriate to their purpose. We delete or anonymize information when it is no longer required, subject to backups and legal retention duties.

We use measures such as password hashing, access controls, role restrictions, HTTPS, limited administrative access, and payment processing through PayPal. No online service can guarantee absolute security.

Some providers may process data outside the Dominican Republic. When required, we use appropriate contractual or legal safeguards and limit the information transferred.

Punta Cana Project does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects. Account, business, review, and event approvals are handled through administrative workflows. PayPal may independently use automated fraud or risk controls under its own policies.

Subject to applicable law, including Dominican Republic Law No. 172-13 on the Protection of Personal Data, you may ask to access, correct, update, object to, or delete personal information, withdraw consent, remove a public business listing, or close an account.

Send requests to info@puntacanaproject.com. We may need to verify your identity and may retain information when the law or a legitimate legal claim requires it. Depending on where you live, you may also have the right to complain to a relevant data-protection authority.

The platform is intended for people aged 18 or older. A person under 18 may attend an expressly family-friendly event only with the involvement and permission of a parent or legal guardian and subject to the organizer’s rules. We do not knowingly create independent member accounts for children.

We may update this policy as the platform, providers, or legal requirements change. We will post the revised effective date and provide additional notice when a change is material. For privacy questions or requests, contact info@puntacanaproject.com.