Iguataxi Privacy Policy

1. Identity of the Data Controller

• Trade name: Iguataxi
• Owner and data controller: Alejandro Manuel Vera
• Legal status: Natural person (sole trader)
• Activity: Private transfers and personalised tours for domestic and international tourists in the Triple Frontier region
• Address: Puerto Iguazú, Misiones, Argentina
• Contact email: iguataxi@gmail.com
• Website: https://iguataxi.com

Alejandro Manuel Vera is the data controller responsible for the personal data collected through the website iguataxi.com and the contact channels indicated in this policy.

2. Personal Data Collected

Depending on how you interact with our website or services, we may collect the following personal data. Iguataxi does not collect or directly process financial, banking or credit card data through this website. Any payment agreed upon is managed directly and personally between the parties.

Data you provide voluntarily

• First and last name
• Phone number
• Email address
• Transfer date and time
• Pickup location and destination
• Number of passengers
• Any additional information you voluntarily choose to share in your inquiry or booking

Data collected automatically

• IP address
• Browsing data (pages visited, session duration, interactions)
• Technical device information (operating system, browser type, screen resolution)
• Traffic source data (source, medium, advertising campaign)

3. How We Collect Your Data

We collect your personal data through the following channels:

• Contact forms on our website, through which you can send us your inquiry or booking request
• WhatsApp button integrated on the site, which initiates a direct conversation with our team through Meta's platform
• Direct email to iguataxi@gmail.com
• Google analytics and advertising tools, which automatically collect browsing data through cookies when you access the website

4. Purposes of Processing

We use your personal data exclusively for the following purposes:

• Coordinating and confirming private transfer and personalised tour bookings
• Communicating with you before, during and after the service
• Responding to inquiries and providing advice about our services
• Sharing the necessary operational data with associated drivers to deliver the service
• Improving the browsing experience on our website
• Analysing traffic and user behaviour for internal statistical purposes
• Optimising our Google Ads campaigns to reach users interested in our services

We do not use your personal data for purposes other than those stated without informing you in advance and, where applicable, without obtaining your consent.

5. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds, in accordance with Argentine Law 25.326 and, for users in the European Economic Area, in accordance with Article 6 of the GDPR:

• Performance of a contract or pre-contractual measures: when you provide your data to book a transfer, processing is necessary to deliver the requested service or to take steps prior to formalising the agreement.
• Consent: when you complete a contact form or initiate a WhatsApp conversation, you consent to the processing of your data for the stated purposes. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to its withdrawal.
• Legitimate interest: for statistical analysis of web traffic and continuous improvement of our services, provided this interest does not override your fundamental rights and freedoms.
• Legal obligation: in cases where applicable Argentine or international law requires it.

6. Data Retention

We retain your personal data for as long as strictly necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. The criteria that determine the retention period are as follows:

• Booking and operational communication data: retained during the active business relationship and for an additional period of up to five (5) years, in line with the civil and commercial limitation periods established by the Argentine Civil and Commercial Code.
• Data with tax or fiscal relevance: retained for a minimum period of ten (10) years, in accordance with the timeframes established by the Administración Federal de Ingresos Públicos (AFIP) and current Argentine tax regulations.
• Analytical data collected via Google Analytics: retained according to the settings configured on that platform, with a default period of fourteen (14) months, after which Google automatically deletes it.
• Advertising campaign data (Google Ads): retained in accordance with Google Ads' own policies, generally for a period not exceeding ninety (90) days from the last recorded interaction.

Once the applicable retention periods expire, data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable person.

7. Recipients and Data Transfers

Iguataxi does not sell, rent or transfer your personal data to third parties for commercial or advertising purposes. Your data may only be shared in the following circumstances, all of which are directly linked to service delivery or legal compliance:

• Associated drivers: when strictly necessary to carry out the booked transfer, we share with the assigned driver only the essential operational data: your name, contact phone number and transfer details (pickup location, destination, date and time). These drivers are prohibited from using this data for any purpose other than providing the service.
• Technology providers: we use Google LLC tools (Analytics, Ads, Tag Manager) that process browsing data in accordance with their own privacy policies, over which Iguataxi has no direct control. We recommend consulting those policies on Google's official website.
• Legal obligations: when required by a competent public authority in the exercise of its legal functions and in accordance with applicable law.

8. Third-Party Tools

Our website integrates third-party tools that may independently collect and process personal data under their own privacy policies. Iguataxi does not control the processing that these third parties carry out with your data once it has been captured by their respective platforms.

Google Analytics

We use Google Analytics to analyse traffic and user behaviour on our site. This tool collects browsing data that may include information such as IP address, device type and pages visited. While Google applies pseudonymisation measures to this data, we cannot guarantee its absolute anonymisation. You can review Google's privacy policy at policies.google.com/privacy and opt out of being tracked using the official Google Analytics opt-out browser extension.

Google Tag Manager

We use Google Tag Manager to manage and deploy tracking tags on the website. This tool acts as a container and does not collect data directly, but it facilitates the implementation of other tools that do, such as Google Analytics and Google Ads.

Google Ads

We use Google Ads to display advertising to users who have shown interest in services similar to ours. This platform may use cookies and similar technologies for conversion tracking and ad personalisation. Data processing carried out by Google Ads is governed by Google's privacy policy.

Google Maps

Our site includes an embedded Google Maps map on the contact page to help users visualise our service area. When this map loads, Google may collect technical data from your device in accordance with its own privacy policy, without any involvement from Iguataxi in that processing.

WhatsApp (Meta Platforms)

The WhatsApp button integrated on our site redirects users to Meta Platforms Inc.'s messaging platform. Conversations held via WhatsApp are subject exclusively to WhatsApp and Meta's privacy policy, over which Iguataxi has no control or responsibility. We recommend reviewing that policy on WhatsApp's official website before initiating a conversation if you have concerns about how Meta handles your data.

9. Cookies

Our website uses cookies and similar technologies to improve the browsing experience, analyse traffic and optimise our advertising campaigns. Cookies are small text files stored on your device when you visit a website.

Types of cookies used

• Technical or essential cookies: necessary for the proper functioning of the website. Without these cookies, certain basic functions may not operate correctly. These do not require prior user consent.
• Analytical cookies: used by Google Analytics to collect statistical information about site usage, such as the number of visitors, most visited pages and session duration. These can be disabled without affecting the essential functionality of the site.
• Advertising cookies: used by Google Ads for conversion tracking and personalisation of ads shown to users who have previously interacted with our site or related content.

How to manage cookies

You can configure your browser to reject, block or delete cookies at any time, either entirely or selectively by type. Please note that disabling certain cookies may affect your browsing experience on this or other websites. For browser-specific instructions or for more general information about cookies, you can visit aboutcookies.org.

10. Your Rights

In accordance with Argentine Personal Data Protection Law 25.326 and the GDPR principles applicable to users in the European Economic Area, you have the right to:

• Access: find out what personal data we hold about you, its origin, purpose and recipients.
• Rectification: request the correction of inaccurate, incomplete or outdated data.
• Update: in accordance with Article 16 of Law 25.326, you may request that we keep your data up to date when it has changed or become inaccurate.
• Erasure: request the deletion of your data when it is no longer necessary for the purposes for which it was collected, when you have withdrawn your consent, or when processing is unlawful.
• Objection: object to the processing of your data in certain circumstances, particularly when processing is based on the legitimate interest of the data controller.
• Restriction: request that we temporarily restrict the processing of your data in certain cases provided for by applicable law.
• Portability: receive your data in a structured, commonly used and machine-readable format, and transmit it to another data controller where technically feasible (primarily applicable under the GDPR).
• Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

The competent supervisory authority in Argentina is the Agencia de Acceso a la Información Pública (AAIP), with whom you can lodge complaints at argentina.gob.ar/aaip.

For users residing in the European Economic Area, you may also lodge a complaint with the data protection authority of your country of residence.

11. How to Exercise Your Rights

To exercise any of the rights mentioned in the previous section, you can contact us through the following channels:

• Email: iguataxi@gmail.com
• WhatsApp: +54 9 3442 478737

In your request, please clearly indicate the right you wish to exercise and the data that identifies you as the data subject, so that we can process your request efficiently. We will respond within the timeframes established by applicable law: thirty (30) business days under Law 25.326, or thirty (30) calendar days under the GDPR where applicable.

If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the relevant supervisory authority, without prejudice to any other administrative or judicial remedy available to you.

12. Data Security

We implement reasonable and proportionate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, improper disclosure or destruction. These measures include:

• Data transmission encrypted via HTTPS protocol with SSL/TLS certificate
• Access to data restricted to personnel necessary to provide the service
• No storage of sensitive data on our own servers beyond what is strictly necessary for operations
• Use of recognised third-party technology platforms that maintain their own certified security measures

However, no data transmission or storage system can guarantee absolute security. Should a security breach occur that may affect your rights or freedoms, we will notify you as required by applicable law and will take the necessary corrective measures as quickly as possible.

13. Children's Data

Iguataxi's services are intended exclusively for adults. We do not knowingly collect personal data from children under the age of thirteen (13) without the prior, express and verifiable consent of their parents or legal guardians.

If you are aware that a minor has provided us with personal data without the consent of their legal representative, please notify us promptly through the channels listed in Section 11. We will delete the relevant data immediately upon verification of the situation.

14. International Data Transfers

As Iguataxi provides services to tourists from various countries, some data processing may involve international transfers to countries that may not provide a level of protection equivalent to that in force in Argentina or the European Union. In particular:

• Google LLC (headquartered in the United States) processes data through its Analytics, Ads and Tag Manager tools, under the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission. Google operates under its own privacy and security policies, over which Iguataxi has no direct control.
• Meta Platforms Inc. (WhatsApp) may process data outside Argentina and the European Economic Area, in accordance with its own privacy policy and the data transfer mechanisms it relies upon. Iguataxi does not intervene in the data processing that Meta carries out within its platform.

Transfers carried out through these platforms include the appropriate safeguards required by applicable law. However, by using these tools, you accept that their respective privacy policies govern the data processing they carry out independently of Iguataxi.

15. Website Availability

Iguataxi makes its best efforts to keep the website continuously available. However, we do not guarantee uninterrupted availability of the site, as temporary interruptions may occur due to technical maintenance, updates, connectivity failures or other causes beyond our control.

Iguataxi shall not be liable for any damages or losses that may result from temporary unavailability of the website, provided that such situation is not attributable to wilful misconduct or gross negligence on our part.

16. Changes to This Policy

Iguataxi reserves the right to update or modify this Privacy Policy at any time to adapt to regulatory, technological or service changes. Any modifications will be published on this page with the corresponding update date.

Continued use of the website following the publication of changes implies acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how we protect your personal data.

17. Date of Last Update

This Privacy Policy was last updated on January 1, 2026.