PRIVACY POLICY – NABOA HOTEL TULUM

Last Updated: [12/05/2025]
Website: https://www.naboahotels.com

1. Introduction

NABOA Hotel Tulum (“NABOA,” “we,” “us,” or “our”) is committed to protecting your personal data and ensuring transparency about how we collect, use, store, and safeguard your information. This Privacy Policy explains the types of data we collect when you visit our website, make a reservation, communicate with us, or stay at our hotel, and outlines your rights under applicable laws, including the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) of Mexico.

By using our website or services, you consent to the practices described in this Privacy Policy.

2. Data Controller

The entity responsible for processing your data is:

NABOA Hotel Tulum
C. 29 Pte. Supermanzana 15, Manzana 229, Lote 003
77765 Tulum, Quintana Roo, México
Email: info@naboahotels.com

If you have questions or wish to exercise any privacy rights, you may contact us using the email above.

3. Personal Data We Collect

We may collect the following categories of personal data depending on your interactions with us:

A. Information You Provide

  • Name

  • Email address

  • Phone number

  • Nationality

  • Payment details

  • Identification documents (required at check-in per Mexican law)

  • Reservation and stay details

  • Preferences, requests, and special needs

  • Communications through email, contact forms, WhatsApp, or phone

  • Participation in yoga, barre, or on-site activities

B. Automatically Collected Information

  • IP address

  • Device and browser type

  • Pages visited and website behavior

  • Cookies and tracking technologies

C. Sensitive Data

We do not intentionally collect sensitive data unless voluntarily provided (e.g., health-related accommodation needs).

4. How We Collect Your Data

We collect information when you:

  • Make a reservation through our website or third-party platforms

  • Communicate with us by email, phone, or messaging apps

  • Check into the hotel

  • Use hotel facilities such as the restaurant or yoga studio

  • Sign up for newsletters or promotions

  • Use our website (cookies, analytics)

5. How We Use Your Data

Primary Purposes

Essential for delivering services:

  • Managing reservations

  • Processing payments

  • Communicating about your stay

  • Providing guest services

  • Meeting legal obligations (guest registry, invoicing)

Secondary Purposes (with your consent)

  • Marketing communications and promotions

  • Surveys and feedback

  • Improving website experience

  • Service optimization and analytics

You may opt out of secondary uses at any time.

6. Legal Basis for Processing

We process data based on:

  • Consent

  • Contractual necessity

  • Legal obligations

  • Legitimate interest (security, fraud prevention, service improvement)

7. Data Sharing

We do not sell or rent personal data.
We may share limited data with:

A. Service Providers

Under confidentiality agreements:

  • Payment processors

  • Reservation systems

  • IT and hosting providers

  • Email and marketing platforms

  • Operational support services

B. Authorities

When required by law.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

C. OTAs

If you booked via Booking.com, Expedia, or similar.

8. International Transfers

If data is processed outside Mexico, we ensure:

  • Standard contractual protections

  • Verified privacy compliance

  • Secure data-handling agreements

9. Data Retention

We retain data only as long as necessary:

  • Reservation and stay data: up to 5 years

  • Payment records: per tax law

  • Marketing data: until you unsubscribe

  • Website analytics: 12–24 months (anonymized when possible)

After this period, data is securely deleted or anonymized.

10. Data Security

We use modern security measures including:

  • SSL encryption

  • Secure server infrastructure

  • Restricted access to personal data

  • Encrypted payment processing

  • Staff confidentiality agreements

  • Regular system monitoring

11. Cookies

Our website may use cookies for functionality, analytics, and preferences.
You may disable cookies in your browser at any time, though some features may be affected.

12. Your Rights (ARCO Rights)

Under Mexican law, you have the right to:

  • Access your personal data

  • Rectify inaccurate information

  • Cancel your data when applicable

  • Object to certain uses

You may also:

  • Withdraw consent

  • Request data portability

  • Limit marketing use

Request these rights via:
info@naboahotels.com

We will respond within the legally required timeframe.

13. Minors

Our services are not directed to minors.
If data from a minor is identified, it will be deleted upon request.

14. External Links

Our website may contain links to external sites.
We are not responsible for their privacy practices.
We recommend reviewing their privacy policies separately.

15. Updates to This Policy

We may update this Privacy Policy from time to time.
The updated version will always be published on our website with a revised date.

16. Contact Information

For inquiries, privacy requests, or concerns:

NABOA Hotel Tulum
C. 29 Pte. Supermanzana 15, Manzana 229, Lote 003
77765 Tulum, Quintana Roo, México
Email: info@naboahotels.com