Privacy Notice

Last updated: September 10, 2026.

1. Who is responsible

Río Lagartos Experiences by Jorge Nuñez (hereinafter, «we»), located in Río Lagartos, Yucatán, Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations. You can write to us at [email protected] or via WhatsApp at +52 986 112 3035.

2. What data do we collect

  • Bookings: name, email, WhatsApp number, preferred language, tour, preferred date and time, number of people, notes you leave us, and your booking reference.
  • Payments: are processed by Mercado Pago or Stripe on their own platforms. We do not store card numbers; we only receive payment confirmation, its amount, and a transaction identifier.
  • Customer account (My account): your email, and if you choose, a password that is stored encrypted. If you log in with Google, we receive your name and email from Google.
  • Subscription to blog notifications: email, language, registration date, confirmation, and unsubscription.
  • Messages: what you write to us via WhatsApp, email, or the site's forms.
  • Navigation: through cookies and Google tools (see point 6): pages viewed, device, browser, language, approximate IP address, and interaction with ads.

3. How we use your data

Necessary purposes: to manage your booking and your deposit, issue your ticket with QR code, assist you via WhatsApp or email, coordinate the tour departure, fulfill tax and legal obligations, and ensure the safety of the operation on the boat.

Additional purposes (you can refuse them without affecting your booking): to send you blog notifications and updates if you subscribe, measure site usage and the effectiveness of our advertising, and improve the site and our tours. To oppose, write to us at [email protected].

4. With whom we share your data

Only with the providers we need to operate, and only the necessary data for each service:

  • Mercado Pago and Stripe: payment processing.
  • WhatsApp (Meta): messaging with our team.
  • Google: Analytics, Ads, and Tag Manager (measurement and advertising), Site Kit, Publisher Center / Reader Revenue Manager (subscription notices on the blog), and logging in with Google in your customer account.
  • Hostinger: website hosting and sending transactional emails.
  • Automatic translation services (DeepL, OpenAI, MiniMax): translate the texts of the site and our email templates. Your personal data (name, email, phone, reference) is not sent to these services: it is inserted into the messages after translating them.

We do not sell or transfer your data to third parties for purposes other than those described. Some of these providers operate outside of Mexico and apply their own privacy policies.

5. How long we keep them

  • Bookings and payments: the time necessary to provide the service and the time required by Mexican tax legislation (five years).
  • Customer account: as long as you keep it active. You can delete it from My account at any time.
  • Subscription to notifications: until you unsubscribe using the link included in each email.
  • Navigation data: according to the retention configured in Google Analytics (by default, 14 months).

6. Cookies and measurement tools

The site uses necessary first-party cookies (chosen language, My account session, currency) and Google cookies and tags (Analytics 4, Ads, Tag Manager) to measure visits, conversions, and advertising. You can block or delete cookies from your browser settings, manage ad personalization at adssettings.google.com, and disable Google Analytics with the opt-out add-on. If you visit from the European Union, we process this data with your consent; you can withdraw it at any time by the same means.

7. Blog notifications and newsletter

Subscription is voluntary, free, and with double confirmation: we only write to you when you confirm your email. You will receive a notice when we publish a new guide or post and, occasionally, seasonal updates. Each email includes a link to unsubscribe with one click. The details are in our notification and newsletter policy.

8. Your rights (ARCO)

You can access your data, rectify it, cancel it, or oppose its processing, as well as revoke your consent or limit its use. Write to us at [email protected] indicating your name, the email you used to book or subscribe, and which right you want to exercise. We respond within a maximum of twenty business days. If you are not satisfied, you can go to the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI).

9. Security

The site operates over HTTPS, passwords are stored encrypted, access keys to our systems are stored encrypted, and access to booking data is limited to our team.

10. Minors

Bookings are made by an adult responsible for the group. We do not intentionally collect data from minors; if you detect that a minor has sent us data without authorization, please let us know and we will delete it.

11. Changes to this notice

We will post any changes on this same page with the update date. If the change affects the purposes or transfers, we will notify you by email if you have an active booking or subscription.