Security Policy - Card Data Protection

E-Transfers Punta Cana does not store full card numbers, expiry dates or CVV codes on its servers or in its database.

• The booking form only records the chosen payment method (cash or card).
• Card payments are processed through a secure external channel; the site stores only a transaction reference and, at most, the last 4 digits.
• All database queries use prepared statements (SQL injection protection).
• Forms are protected with CSRF tokens and all output is escaped to prevent XSS.
• Admin passwords are stored with secure hashing; nobody can read them, not even the administrator.
• Your personal data is used only to manage your transfer and is never sold to third parties.

For questions about your data write to emanuellopezr27@gmail.com.