Privacy notice.

01Who is responsible

Riviera Maya Haciendas, S.A. de C.V. (RFC RMH091106HR7), Punta Matzoma 15, Puerto Aventuras, Solidaridad, Quintana Roo 77733, Mexico (“Riviera Maya Haciendas”, “we”), is responsible for your personal data, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties.

For anything about your data, write to rentals@rivieramayahaciendas.com.

02What we collect

• Contact details: name, email, phone or WhatsApp number.
• Trip details: dates, number of guests, the occasion, preferences and the messages you send us by form, email, phone, chat or WhatsApp.
• Booking details, when you book: the names of the people staying, billing details and payment confirmations. Card or bank details are handled by the bank or payment provider, not by this website.
• How you use the site: pages visited, how you arrived (an ad, a link, a search), cookie and ad-click identifiers, device and browser, and IP address.

We don’t ask for sensitive data. If you tell us something sensitive (a health or dietary need, for example), we use it only to look after your stay.

03What we use it for

To give you what you ask for, we use your data to:

• answer your questions and send quotes and availability;
• book, take payment and prepare and run your stay;
• write to you about your booking;
• keep the site secure and free of spam;
• meet our legal, tax and accounting duties.

04Uses you can say no to

Unless you tell us not to, we also use your data to:

• send you our newsletter and offers;
• measure how the site is used;
• know which ad or link brought you and measure our advertising, including sending scrambled (hashed) contact details to ad platforms when an inquiry becomes a booking;
• show you Riviera Maya Haciendas ads on other sites.

Say no at any time: Cookie settings at the foot of every page, the unsubscribe link in every newsletter, or an email to rentals@rivieramayahaciendas.com. Saying no never affects your booking or the answer you get.

05Who we share it with

Companies that handle data for us, on our instructions:

• Pipedrive (our customer records and chat), Guesty (reservations), Brevo (the site’s emails);
• Hostinger (hosting) and Cloudflare (forms, spam protection, security, backups);
• Meta / WhatsApp (messaging) and Anthropic (reads the emails we receive so they are filed in our customer records);
• Google, Meta, Microsoft, Pinterest, OpenAI and PostHog (measurement and advertising; which ones run depends on your cookie choice).

Some of them are outside Mexico, mainly in the United States and the European Union.

Beyond that, we share your data only when your booking needs it (for example with the owner of the villa or condo you book, or the travel advisor who booked for you) or when the law requires it. We don’t sell your data.

06Your rights

You can ask to access your data, correct it, have it deleted, or object to a use (in Mexico, your ARCO rights). You can also withdraw your consent or ask us to limit a use.

Email rentals@rivieramayahaciendas.com with your name and how to reach you, a copy of an ID (or proof that you act for the person), the data concerned and what you are asking for. We answer by email within the deadlines Mexican law sets.

If you think we haven’t respected your rights, you can go to Mexico’s data-protection authority, the Secretaría Anticorrupción y Buen Gobierno.

07Cookies

We use our own and third-party cookies so the site works, to measure it and to measure our advertising. What each one does, how long it lasts and how to change your choice: our cookie policy. Cookie settings is at the foot of every page.

If your browser sends Global Privacy Control, advertising cookies start switched off. Browsers’ older “Do Not Track” signal has no agreed meaning, so we don’t act on it.

08How long we keep it

As long as the uses above and our legal, tax and accounting duties need it. The records of how a visit reached the site are deleted after 120 days.

09Keeping it safe

Access to your data is limited to the people and providers who need it, and we use technical and organisational measures to protect it. No system is perfectly secure; if a breach ever affected your data in a significant way, we would tell you, as the law requires.

10Children

This site is for adults planning a trip. We don’t knowingly collect data from anyone under 18; children’s names reach us only when a parent or guardian books for them.

11Changes to this notice

Any change is posted on this page with its date at the top. The Spanish version (aviso de privacidad) is the one Mexican law reads; this English version says the same.