Legal · Privacy notice
Privacy Policy
This policy explains what personal data Punta Mita Experience collects when you visit puntamitaexperience.com, book a tour or contact us, what we use it for, who we share it with and how you can exercise your rights.
In short
- We use your data to manage your booking and contact you about it by email, phone or WhatsApp.
- We never see or store your full card number: payments are processed by Stripe.
- We do not sell your data. We only share it with the providers that run the site: payments, email, hosting, security, analytics and advertising.
- You can access, correct or delete your data, object to its use, and opt out of secondary uses such as advertising by writing to privacidad@puntamitaexperience.com.
- We do not collect sensitive personal data.
Who is responsible for your personal data?
Punta Mita Experience, located at Marina Punta Mita, Punta de Mita, Nayarit, Mexico, is responsible for processing your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties.
What personal data do we collect?
We only collect the data we need, depending on how you interact with us:
- Identity and contact details: first name, last name, email address and phone number with country code.
- Booking details: tour, date, time and number of participants by type (for example, adults and children). We do not ask for the names of your companions.
- Optional details: your home city and the hotel or area where you are staying, if you choose to share them.
- Payment details: processed directly by Stripe. We never receive or store your full card number or security code.
- Messages: anything you send us through the contact form, by email or on WhatsApp.
- Reviews: the name, rating, comment and photos you choose to publish.
- Technical browsing data: IP address, browser and device type, pages visited and cookie information.
We do not collect sensitive personal data, such as health information, ethnic origin or beliefs. If you choose to share health information relevant to your safety on board, we will use it for that purpose only.
How do we use your data?
Purposes required to provide the service
These purposes are essential to fulfill your booking and do not require additional consent:
- Creating, confirming and managing your booking.
- Contacting you about your booking: confirmation, time changes due to tides or weather, meeting point and transportation, by email, phone or WhatsApp.
- Processing payments, refunds and rescheduling.
- Replying to the messages you send us.
- Protecting the site against fraud, spam and automated access.
- Meeting legal and tax obligations.
Secondary purposes (you can opt out)
- Measuring how the site is used in order to improve it (analytics).
- Measuring our advertising and showing you personalized ads (remarketing) on Google and Meta platforms.
- Inviting you by email to review your tour, and publishing your review if you submit one.
- Keeping a customer history (for example, which tour you booked) to improve our service.
How to opt out: email privacidad@puntamitaexperience.com with the subject “Secondary purposes” and tell us which ones you object to. Opting out does not affect your booking. For personalized ads, you can also adjust the ad preferences in your Google or Meta account.
We do not send newsletters. If we ever do, we will ask for your explicit consent first.
How long do we keep your data?
- Bookings and payments: for the period required by Mexican tax law, generally five years.
- Contact messages: while we handle your inquiry and for a reasonable follow-up period.
- Reviews: while they are published or until you ask us to remove them.
- Analytics and advertising data: according to the retention settings of each platform.
When these periods end, we delete or anonymize your data.
What are your rights and how can you exercise them?
You have the right to access your data, correct it if it is inaccurate, have it deleted, and object to its use for specific purposes (known in Mexico as ARCO rights). You can also withdraw your consent and limit the use or disclosure of your data.
How to submit a request
Email privacidad@puntamitaexperience.com and include:
- Your full name and the email or phone number you used to book.
- The right you wish to exercise and a clear description of the data involved.
- A document proving your identity or, if you act on behalf of someone else, your authority to do so.
- For corrections, the correct information.
We will reply within 20 business days to the email address you wrote from. You can use this address for any request about your data, wherever you live.
How do we protect your data?
- Encrypted connection (HTTPS) across the entire site.
- Payments processed on Stripe’s infrastructure, certified under the PCI DSS standard.
- Firewall and security plugin on the server.
- Anti-bot verification on the contact form and safeguards against automated bookings.
- Access to the admin panel restricted to authorized staff.
Do we collect data from minors?
Bookings must be made by people aged 18 or over. For minors taking part in a tour, we only record how many there are and their age range, with no names or other details.
What happens if this policy changes?
We will publish any changes on this page and update the “Last updated” date. If a change requires your consent, we will ask for it before applying it.