Privacy notice

1. Who is responsible for your data

The data controller is Corazón Luxury Home Rentals, at Arrecife Xaman-Há 4, Playacar Fase I, 77713, Playa del Carmen, Quintana Roo, México, reachable at booking@corazonrentals.mx.

This notice is made available to you before you send us any data, as required by articles 15, 16 and 17 of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

2. What we collect

When you send a booking request from this site we collect, directly from you:

• Full name.
• Check-in and check-out dates, number of guests and bedrooms.
• Any message you choose to write (for instance, the occasion).
• Your phone number or your email, depending on which button you use to send the request (WhatsApp or email).

We do not collect sensitive personal data or financial data through this site. The site takes no payment: if your booking is confirmed, payment happens off this page, by the means you agree with our agent.

3. What we use it for

Purposes necessary to our relationship:

• Handling your request, confirming availability and quoting you.
• Arranging and managing your stay (check-in, check-out, security deposit).
• Meeting applicable tax and guest-registry obligations.

Additional purposes, which you may refuse without affecting your booking, are seasonal offers and promotions. Just tell us and we will stop.

4. Who it is shared with

We do not sell your data. It is shared only in these cases:

• Booking platforms (Airbnb, Guesty and equivalent channels) when your booking originates from or syncs through them.
• Messaging providers: if you write to us on WhatsApp, the conversation is also subject to WhatsApp's policies (Meta Platforms).
• Authorities, where there is a lawful, reasoned request.

In addition, and regardless of whether you write to us: our pages embed a Google Maps map and Google Fonts typefaces. When the page loads, your IP address and basic browser data are transmitted to Google LLC, which handles them under its own policies. We say so here because it happens simply by visiting us.

5. Exercising your ARCO rights

You may Access your data, Rectify it if inaccurate, Cancel it where you believe it is no longer needed, and Object to specific uses. You may also withdraw your consent.

Send your request to admin@corazonrentals.mx with your name, a way to reach you, a copy of your ID and a clear description of what you are asking for. We reply within 20 business days and, where it applies, act on it within the following 15 business days.

If you believe your data protection rights have been infringed, you may turn to Mexico's data protection authority, INAI (inai.org.mx).

6. How long we keep it

• Confirmed bookings: five years, matching accounting and tax retention.
• Requests that never became bookings: twelve months.
• WhatsApp or email threads: as long as the enquiry requires and then the same period as the request they belong to.

7. Changes to this notice

Any change is published on this same page with the date of the latest update. We suggest reviewing it before sending us data.