Privacy notice

This notice explains which personal data we collect on mayanmemories.com.mx and through WhatsApp, what we use it for and how you can exercise your rights, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Who is responsible

The party responsible for your data is Mayan Memories, with its address at Real del Carmen 302, Playacar Fase 2, Playa del Carmen, Quintana Roo, Mexico.

For anything about your personal data, write to [email protected] or message us on WhatsApp at +52 984 213 0160.

2. The data we collect

When you write to us through the contact form: your name, email address and message and, if you choose to give them, your phone number, the kind of experience you are interested in and the date you have in mind.

When you write to us on WhatsApp: your name and phone number, the message the site prepares for you (the experience, the date and the number of adults and children) and whatever you share in the conversation to arrange your booking, such as your hotel for the pickup and the names of the people travelling.

Children's data: only the number of children, to apply the child rate and, where an activity requires it, their name or age, always provided by their parent or guardian.

While you browse the site: we ask you for nothing. See section 6 on cookies and statistics.

We do not collect sensitive personal data or payment card details through this site.

3. What we use your data for

We use your data only for these purposes, all of which are needed to handle your request:

Answering your questions and sending you information and prices for our experiences.
Checking availability and managing your booking: tours, yachts, parks, restaurants, beach clubs and nightlife.
Coordinating your experience with whoever provides it (see section 4) and contacting you about it, for example about a change of time or the weather.
Meeting our legal obligations, such as tax obligations.

We do not use your data to send you advertising or for any other purpose. If we ever wanted to, we would ask for your consent first.

The providers of the experiences. To make your booking happen we share the data needed (for example names, number of people, date and hotel) with whoever provides the experience: tour operators, parks, restaurants, beach clubs, nightclubs and boat owners. This transfer is necessary to do what you ask of us, so it does not require your consent.

Providers working on our behalf. We use technology providers that process data only on our instructions: Cloudflare (hosting and delivering the site), Resend (sending contact-form messages to our inbox) and the provider that builds and maintains this site. Some of them are located in the United States.

WhatsApp. If you write to us on WhatsApp, the conversation also passes through WhatsApp's services (Meta), which handles it under its own privacy policies.

Beyond these cases we do not sell, rent or share your data, except when a competent authority requires it by law.

5. How long we keep your data

The site keeps no copy of contact-form messages: they are sent to our inbox and are not stored on the site. We keep your messages and booking details for as long as needed to handle your request and your experience and, after that, only as long as our legal obligations require.

To prevent abuse of the form we may use, for one hour, a scrambled fingerprint (hash) of your IP address — never the address itself.

6. Cookies and statistics

This site uses a single cookie, site_lang, and only if you pick a language in the language switch: it remembers that language for one year so the site opens in it. It is needed for that function and is not used to identify you or for advertising.

When you open the home page we use your connection's country and your browser's language to show you the site in Spanish or English. We do not store this.

We measure visits with Cloudflare Web Analytics, which uses no cookies and does not track people across sites: it only gives us aggregate figures, such as the number of visits per page. Like any website, our hosting provider (Cloudflare) processes your IP address to deliver the pages and protect the site.

We use no advertising or social-media cookies. Links to Instagram, Facebook and WhatsApp take you to those services, which apply their own policies.

7. Your rights (ARCO) and how to exercise them

You can access your data, ask us to rectify it if it is inaccurate, to cancel (delete) it or object to its use, and you can revoke your consent or limit the use of your data.

Send your request to [email protected] with:

your name and a way to reply to you;
a document proving your identity (or, if you act for someone else, your authority to do so);
a clear description of the data and of the right you want to exercise;
for a rectification, the correct data.

We will answer through the same channel within the time limits set by the LFPDPPP. Please note that if you cancel your data or revoke your consent before your experience, we may be unable to complete your booking.

If you believe your right to the protection of your personal data has been violated, you may turn to the Secretaría Anticorrupción y Buen Gobierno, Mexico's competent authority.

8. Changes to this notice

If we change this notice, we will publish the new version on this page with its update date.

This English version is a translation; in case of any difference, the Spanish version prevails.