Privacy Policy

Arriba Event Rentals ("Arriba," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and share it, and your choices regarding that information when you use our website, applications, and rental services (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2.1 Account Information

When you sign in through one of our supported OAuth2 providers (Google, Facebook, or Apple), we receive and store the following from your identity provider:

• Name — your display name
• Email address — used as your unique account identifier

We do not receive or store your password from any identity provider. A customer record is automatically created upon your first sign-in.

2.2 Order & Contact Information

When you place a rental order or create an account, we collect:

• Full name
• Email address
• Phone number
• Date of birth
• Delivery address (if you select delivery fulfillment)
• Point-of-contact name and phone number (if different from account holder)
• Event dates (rental start and end dates)
• Special instructions you provide for the order
• Product selections and quantities

2.3 Identity Verification

As part of our rental fulfillment process, we may request a photograph of a government-issued photo ID. This photo ID is collected solely for the purpose of verifying your identity and may be retained and used in the event of a legal dispute, including but not limited to claims related to damage, loss, or non-return of rental items. Photo ID images are stored securely and are not shared with third parties except as required by law or to resolve disputes.

2.4 Payment Information

Payments are processed by our third-party payment provider, Stripe. When you submit a payment, your card number and billing details are sent directly to Stripe and are not stored on our servers. We retain only a payment reference (transaction ID), payment source type, deposit amount, tax amount, and order amount for our records.

2.5 Location & Delivery Data

If you request a delivery quote, the address you provide is sent to the Google Maps Distance Matrix API to calculate the distance and estimated drive time between your delivery address and our nearest warehouse location. We do not track your real-time location.

2.6 Automatically Collected Information

When you use the Service, we may automatically collect:

• Browser type and version
• Operating system
• Pages visited and time spent on the Service
• Referring URL
• IP address

We use the information we collect to:

• Create and manage your customer account
• Process and fulfill your rental orders, including delivery and pickup coordination
• Calculate delivery quotes and determine service area eligibility
• Process payments and issue refunds
• Communicate with you about your orders (confirmations, updates, and reminders)
• Respond to your inquiries and provide customer support
• Send you marketing communications, including promotions, special offers, and event-related content (you may opt out at any time)
• Improve and personalize the Service
• Verify your identity and resolve disputes related to rental orders
• Comply with legal obligations

We do not sell your personal information. We share your information only in the following circumstances:

• Payment processing: Payment details are shared with Stripe to process transactions. Stripe's use of your information is governed by their Privacy Policy.
• Delivery routing: Your delivery address is shared with the Google Maps API to calculate distances. Google's use of this data is governed by their Privacy Policy.
• Authentication: We use OAuth2 sign-in via Google, Facebook, and Apple. These providers share your name, email, and profile picture with us as described in their respective privacy policies.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

The Service uses the following cookies:

• Session cookies: Used to maintain your authenticated session after signing in via OAuth2.
• CSRF token cookies: Used to protect against cross-site request forgery attacks. These are essential security cookies and cannot be disabled.

We do not use third-party advertising or analytics cookies at this time. Your event date and cart selections are stored in your browser's local memory and are not transmitted to third parties.

We retain your account information and order history for as long as your account is active or as needed to provide the Service, fulfill orders, and comply with our legal and financial record-keeping obligations.

If you wish to delete your account and associated data, please contact us at support@arribarentals.com. We will process your request within 30 days, subject to any legal retention requirements.

We use industry-standard measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure OAuth2 authentication, and CSRF protection. Payment card data is handled entirely by Stripe and never touches our servers.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict the processing of your information
• Request a portable copy of your data
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at support@arribarentals.com. We will respond within 30 days.

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. The most current version will always be available on the Service with the "Last updated" date at the top. Material changes will be communicated via email or a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or how we handle your information, please contact us at:

Arriba Event Rentals
Email: support@arribarentals.com
Website: www.arribarentals.com