Privacy notice

El Tiburón Sayulita, S.A. de C.V., which operates the hotel Casa Las Almas (La Huerta s/n, La Huerta, Mazunte, Santa María Tonameca, Oaxaca, 70947, Mexico), is responsible for the processing of your personal data and for compliance with the obligations set out in Mexico's Federal Law on Protection of Personal Data Held by Private Parties.

To provide our services, we may collect the following personal data:

• Identification: full name, signature, official ID and date of birth.
• Contact: address, email address and phone number.
• Financial: credit or debit card details and tax ID (RFC, for invoicing).
• Data you share with us on this website: in the contact form, your name, email address, arrival and departure dates (optional) and message; and, for the newsletter, your email address.
• Browsing data: IP address, browser type and pages visited, through cookies and similar technologies (see section 7).

Your personal data is used for the following purposes, which are necessary for the service you request:

• Managing and confirming your lodging reservation.
• Processing check-in and check-out.
• Processing payments, invoicing and charges related to your stay.
• Handling requests, complaints or special requirements, including the messages you send through the contact form.

Additionally, and only if you do not opt out, we use your information for the following secondary purposes, which are not necessary for the service but allow us to serve you better:

• Sending promotions, newsletters and special offers.
• Conducting satisfaction and service-quality surveys.

If you do not want your data used for these secondary purposes, you may say so through the contact listed in section 5, or at the time your consent is requested. You can also unsubscribe from our emails at any time by writing to that same address.

Your personal data may be shared with relevant authorities, banks or payment processors and online booking platforms, solely for the security, legal-compliance and payment-processing purposes described here.

In addition, to run the website and reservations, the hotel relies on providers that process data on its behalf: Cloudbeds, which operates the booking engine, and Axovia, which manages the website and the customer-service system (CRM).

We do not share or sell your personal data to third parties for purposes other than those stated in this notice.

You have the right to know what personal data we hold about you and how we use it, and to request its correction or deletion, or to object to its use for specific purposes. To exercise any of these rights, send your request to hola@casalasalmas.com, including:

• Your full name and contact details.
• A document proving your identity.
• A clear description of the right you wish to exercise.

We will respond to your request within a maximum of 20 business days, as required by law.

You may withdraw any consent you have given us for the processing of your personal data by writing to the email address listed in section 5. Please note that in some cases this may mean we can no longer provide you with the service requested.

Our website uses cookies and similar technologies to recognize you on future visits and offer you a personalized experience. You can disable cookies through your browser settings; this may affect some site functions.

We reserve the right to update this privacy notice. Any changes will be published on this same page, along with the corresponding update date.