1. Introduction

Welcome to the Privacy Policy of EcoCostaMex ("we" or "our"), a sustainable travel agency based in Mexico. We are committed to protecting the privacy and security of your personal information. This policy describes how we collect, store, protect, and use user data, as well as your rights regarding your data, data security measures, and third-party data sharing.

By accessing or using the EcoCostaMex website, you agree to the terms of this privacy policy.

2. Information We Collect

We may collect and process the following types of personal data:

  • Name
  • E-mail address
  • Phone number
  • Postal address
  • Payment information

3. Legal Basis for Processing Personal Data

We rely on the following legal grounds to collect and process personal data:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests pursued by EcoCostaMex or a third party

4. How We Collect and Use Your Data

We collect personal data directly from you when you:

  • Make a booking
  • Use our contact form
  • Sign up for our newsletter
  • Participate in surveys, promotions, or competitions

We use your data for the following purposes:

  • Provide services you book with us
  • Manage and process payments
  • Communicate important updates and promotions
  • Respond to your inquiries and requests
  • Conduct surveys and improve our services
  • Comply with legal obligations

5. Data Storage and Retention

We store and retain your data securely following the required precautions to protect against loss, misuse, unauthorized access, alteration, or destruction.

We retain personal data for as long as needed to fulfill the purposes outlined in this privacy policy, and as required by applicable laws. When your personal data is no longer necessary, we will securely delete or anonymize it.

6. International Data Transfers

If you are located outside of Mexico, please note that the information we collect may be transferred to and processed in Mexico. We ensure that adequate safeguards are in place to protect your data as required by applicable data protection laws.

7. Your Rights

You have the following rights in relation to your data:

  • Right to access: You have the right to request access to the personal data we hold about you.
  • Right to rectification: You may request the correction of any inaccurate or incomplete personal data.
  • Right to erasure: You can request the deletion of your personal data under certain circumstances, unless there are legal obligations preventing us from doing so.
  • Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing.
  • Right to data portability: You can request a copy of the personal data we hold about you in a structured, machine-readable format.
  • Right to withdraw consent: If we rely on your consent as the legal basis for processing, you can withdraw your consent at any time.

8. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We regularly review and update our security measures to ensure your data remains secure.

9. Third-party Data Sharing

We may share your personal data with trusted third parties who provide services on our behalf. These parties are bound by data protection obligations and are contractually prohibited from using your data for any other purpose.

We may use Google Analytics to gather traffic data. Please consult Google's privacy policy for more information.

10. Updating Our Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review the updated policy each time you engage with us.

11. Contact Us

If you have any questions or concerns regarding this privacy policy, please Contact Us at info@decostaricaenmexico.org.

By using EcoCostaMex services, you acknowledge that you have read and understood this privacy policy and agree to its terms.

Last updated: Privacy Policy