Privacy Policy

1. Who is responsible for your data

Cuba with Yoyo is operated by Yusmel Colombo Aguilar, based in Luxembourg ("we", "us"). If you have any question about your personal data, write to us at [email protected] or call/WhatsApp +352 621 430 283.

2. What we collect, and why

• Contact and booking form. Your name, email, WhatsApp number (if you give it) and the trip details you write to us. We use them only to answer your enquiry and to design, confirm and run your tour. The form is provided by Google Forms: your answers are processed by Google on our behalf and stored in our Google account.
• Newsletter. Your email address, first name (optional) and preferred language — only if you subscribe, and only with your explicit consent. We use them to send the Cuba with Yoyo letter, roughly once a month. You can unsubscribe at any time.
• WhatsApp and email. If you contact us directly, we process what you send us so we can reply and organise your trip.
• Photos and videos from tours. Only used for promotion with the consent of the people shown — see our Terms.

Under the GDPR, we rely on your consent, on steps taken at your request before a contract and the performance of a contract (your tour), and on our legitimate interest in running and improving a small travel business.

3. We never sell your data

We do not sell, rent or share your personal data for third-party marketing. Ever. Your details only ever reach the Cuba with Yoyo team and the service providers listed below.

4. Who processes data for us

• Google — the contact form, the newsletter form and our response inbox and spreadsheets.
• GitHub — this website is hosted on GitHub Pages.
• Meta — our Facebook page and WhatsApp, if you use them to reach us.

These providers may process and store data outside your country, including in the United States, under their own published safeguards and certifications.

5. How long we keep it

Booking enquiries are kept while we work with you and for a reasonable period afterwards, for follow-up and accounting. Newsletter data is kept until you unsubscribe or ask us to delete it. You can ask us to delete your data at any time and we will do so unless the law requires us to keep specific records.

6. Your rights

If you are in the European Union (GDPR), you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. You can withdraw consent at any time, and you can complain to a data protection authority — for example the CNPD in Luxembourg, or your local authority.

If you are in California (CCPA/CPRA), you have the right to know what personal information we hold, to delete it, to correct it and to opt out of its sale. We do not sell personal information, and we will never discriminate against you for exercising your rights.

If you are in Mexico, you hold the ARCO rights — access, rectification, cancellation and opposition — under the LFPDPPP. Argentina (Law 25.326), Colombia (Law 1581), Brazil (LGPD) and Cuba (its personal data protection law) grant equivalent rights to access, correct and delete your data.

To exercise any of these rights, email [email protected]. We reply within the timeframe your law requires — under the GDPR, within one month.

7. Cookies

This site only loads third-party services (the Google forms) with your consent. Full details are in our Cookie Policy, and you can change your choice at any time from the "Cookie settings" link in the footer.

8. Changes to this policy

If we update this policy, the new version will be published on this page with its date. Material changes affecting newsletter subscribers will be announced in the letter itself.