Privacy Policy

At Xiinbal Costa Maya Tours, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it and what rights you have in relation to it.

By using our website or booking our services, you agree to the collection and use of information in accordance with this policy.

01

Information We Collect

We collect information you provide directly when making a booking or contacting us, including:

• Full name
• Email address
• Phone number
• Payment information (processed securely by Stripe — we do not store card details)
• Tour preferences, travel dates and any special requirements you share with us

We may also collect non-personal information automatically when you visit our website, such as browser type, pages visited and time spent on the site, through standard web analytics tools.

02

How We Use Your Information

We use the information we collect to:

• Process and confirm your bookings
• Send booking confirmations and important updates about your tour
• Respond to your inquiries and provide customer support
• Improve our website and services
• Send occasional promotional communications, only if you have opted in

We will never sell, rent or share your personal information with third parties for marketing purposes.

03

Payment Processing

All payments are processed through Stripe, a secure third-party payment processor. Xiinbal Costa Maya Tours does not store, process or have access to your full payment card details. Stripe's privacy policy governs the handling of your payment information and can be found at stripe.com/privacy.

04

Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience, remember your preferences and analyze site traffic. You can control cookie settings through your browser at any time. Disabling cookies may affect certain features of the website.

05

Third-Party Services

We may use third-party services to operate our website and deliver our services, including:

• Stripe — payment processing
• Amelia — booking and reservation management
• WPForms — contact and inquiry forms
• Google Maps — location services

Each of these services has its own privacy policy governing the use of your information. We encourage you to review them.

06

Data Retention

We retain your personal information only for as long as necessary to provide our services and comply with our legal obligations. Booking records are kept for a minimum of 3 years for accounting and legal purposes. You may request deletion of your data at any time by contacting us directly.

07

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data
• Withdraw consent for marketing communications at any time
• Lodge a complaint with a relevant data protection authority

To exercise any of these rights, please contact us using the details below.

08

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

09

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or the way we handle your data, please reach out: