Privacy Policy

1. Data Controller

The person responsible for processing the personal data collected through this website is:

• Name: Jonh Herrera
• Activity: Adventure and nature tourism — Mayan Routes
• Email: johgh1@gmail.com
• Location: Bacalar, Quintana Roo, Mexico

2. Data We Collect

Through the contact and booking form on this website, we collect the following personal data:

• Full name
• Email address
• Phone number or WhatsApp (optional)
• Country of origin (optional)
• Tour of interest, preferred date and number of people
• Message or additional comments (optional)

We do not collect sensitive data such as financial information, identity documents or health data.

3. Purpose of Processing

The personal data you provide is used exclusively to:

• Respond to your information or booking request
• Coordinate the logistics of your experience with Mayan Routes
• Send you confirmations or relevant information related to your booking

We do not use your data to send unsolicited advertising, nor do we sell it to third parties.

4. Legal Basis for Processing

The processing of your data is based on:

• Your express consent, provided by checking the acceptance box in the form
• Pre-contractual relationship, when you request information about our services

5. Third Parties That Process Your Data

For sending and receiving forms we use the service Formspree (formspree.io), a form processor based in the United States. Formspree temporarily receives form data to transmit it to our email. You can read their privacy policy at formspree.io/legal/privacy-policy.

We do not share your data with any other third party, marketing agency or advertising platform.

6. Cookies and Tracking Tools

This website currently does not use tracking cookies or third-party analytics tools. Should we implement them in the future, this policy will be updated and your prior consent will be requested.

7. Data Retention

We retain your personal data only for the time necessary to process your request or booking. Once the relationship is concluded, data is deleted within a maximum of 12 months, unless the law requires a longer retention period.

8. Your Rights

In accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties, and where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

• Access: know what data we hold about you
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Objection: object to the processing of your data
• Portability: receive your data in digital format (GDPR)
• Withdrawal of consent: revoke your consent at any time

To exercise any of these rights, write to johgh1@gmail.com stating your name and your request. We will respond within a maximum of 20 business days.

9. Data Security

We adopt reasonable measures to protect your personal data against unauthorized access, loss or disclosure. However, no internet transmission system is completely secure, so we cannot guarantee absolute security.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with the update date. We recommend reviewing it periodically.