Identity and Address of the Data Controller

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, “the Law”), INCREMSA, S.A. DE C.V. (hereinafter, “Tulum Riviera Maya Tours”), with its registered address at CIRCUITO PASEO DEL MAYAB 10, MANZANA 12, LOTE 1, SUPERMANZANA 514, C.P. 77535, CANCÚN, BENITO JUÁREZ, QUINTANA ROO, and website tulumrivieramayatours.com, is responsible for the use and protection of your personal data.

Personal Data We Collect

To fulfill the purposes outlined in this Privacy Notice, we will use the following categories of personal data:

  1. Identification and Contact Information:
    • Full name.
    • Email address.
    • Phone number (landline and/or mobile).
    • Nationality.
  2. Service Data (Reservations):
    • Dates of your tours or services.
    • Hotel name or pickup location (for transportation logistics).
    • Names of your companions (for group bookings).
  3. Financial and Billing Data:
    • Credit or debit card details (processed through PayPal).
    • Federal Taxpayer Registry (RFC) (if you require an invoice).
    • Billing address.

Sensitive Personal Data

Occasionally, and only when strictly necessary to ensure your safety and well-being during the tour, we may request sensitive personal data such as:

  • Dietary restrictions (e.g., allergies).
  • Relevant medical conditions (e.g., heart problems, reduced mobility, etc.) necessary for participation in physical activities.

This information will be handled with the highest security and confidentiality standards and used solely for the primary purposes stated below.

Purposes of Data Processing

Your personal data will be used for the following purposes:

A) Primary Purposes (Necessary for Service Delivery):

  • Manage, process, confirm, and provide the tourist services (tours) you request.
  • Coordinate logistics, including transportation and meeting points.
  • Process your payment through payment service providers (PayPal) and issue invoices if applicable.
  • Contact you to follow up on your reservation, inform you of any changes, cancellations, or operational details.
  • Respond to information requests, complaints, suggestions, or questions.
  • Fulfill legal obligations and respond to competent authorities.

B) Secondary Purposes (Not Required, but Help Us Improve Our Services):

  • Send promotions, special discounts, and newsletters about our tours and destinations.
  • Conduct satisfaction surveys to evaluate our service quality.
  • Use anonymized data for internal statistical and historical analysis.

Opt-Out Mechanism for Secondary Purposes

If you do not wish your personal data to be used for these secondary purposes, you may express your refusal by sending an email to [email protected] the subject “Opt-Out of Secondary Purposes.”

Your refusal will not affect the provision of the products or services you request or contract with us.

Transfer of Personal Data

We inform you that your data may be shared within Mexico with the following third parties for the purposes described below:

Recipient (Third Party) Purpose of Transfer Requires Consent
Tour Operators and Guides To coordinate and execute the service (tour, transport, park access) you purchased. No
PayPal (and/or payment gateways) To securely process your reservation payment. No
Government Authorities (e.g., PROFECO, SAT) Compliance with legal obligations and official requests.

 

No

 

Transfers marked as “No” do not require consent under Article 37 of the Law, as they are essential for the provision of the contracted service.

ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we hold about you, how we use it, and the conditions of that use (Access).
You also have the right to request correction of your data if it is outdated, inaccurate, or incomplete (Rectification); request deletion when it is not used properly (Cancellation); and oppose its use for specific purposes (Opposition).

These are known as ARCO Rights.

Procedure for Exercising ARCO Rights and Revoking Consent

To exercise any of your ARCO rights or revoke consent for data processing (including for secondary purposes), please send your request to:

Your request must include:

  1. Your full name and email address to receive a response.

  2. A copy of valid official ID (INE or Passport).

  3. A clear description of the data for which you seek to exercise your rights.

  4. Any information that helps locate the data.

We will respond within 20 business days, and if appropriate, we will fulfill your request within 15 business days after notification.

Use of Cookies and Web Beacons

Our website tulumrivieramayatours.com uses cookies, web beacons, and similar technologies to monitor user behavior and improve your browsing experience.

The data collected (such as browser type, pages visited, browsing time) are used for statistical and service improvement purposes.

You may disable these technologies anytime through your browser settings.

Modifications to This Privacy Notice

This Privacy Notice may be modified or updated due to legal changes, service updates, or internal privacy practices.

We are committed to keeping you informed about such changes via publication on our website:

tulumrivieramayatours.com/aviso-de-privacidad

Last Update:

22 de octubre de 2025.