Privacy Policy
General
All Seasons Tours (“All Seasons Tours”) recognizes the importance of protecting the personal data of our clients and website visitors and commits to full compliance with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations, as well as the INAI Lineamientos del Aviso de Privacidad. This Privacy Policy applies to all personal data collected in connection with our airport transfers, point‑to‑point transfers, open‑service transfers, and excursions in Cancún, Riviera Maya, Playa del Carmen, and Tulum.
1. Data Controller Identification & Address
Data Controller:
All Seasons Tours
Avenida Kukulcán km 12.5, Zona Hotelera
Cancún, Quintana Roo, México
Email: All.Seasonstours.business@gmail.com
Phone: +52 (998) 484 6982
2. Purpose of Data Processing
2.1 Primary Purposes
-
Provide and manage airport transfers, point‑to‑point transfers, open‑service transfers, and excursions .
-
Process reservations, confirmations, billing, and payments.
-
Respond to service inquiries, complaints, or claims.
2.2 Secondary Purposes
-
Send newsletters, promotions, and special offers with your explicit consent.
-
Conduct statistical analyses to improve and personalize our services.
3. Personal Data We Collect
3.1 Identifying and Contact Data
-
Full name, email address, telephone number, postal address, date of birth, and nationality.
3.2 Travel‑Related Data
-
Flight number, airline, arrival/departure dates and times, pickup and drop‑off locations.
3.3 Billing Data
-
Tax ID (RFC), billing address, and payment details (credit/debit card information, PayPal account).
3.4 Sensitive Personal Data
-
We do not collect sensitive personal data (e.g., health information, religious beliefs, ethnic origin) unless strictly necessary to accommodate special travel or excursion requirements, and only with your explicit authorization.
4. Data Retention
We retain personal data only for the period necessary to fulfill the purposes outlined:
-
Travel bookings & confirmations: 2 years after service completion.
-
Billing & tax records: 5 years to comply with fiscal obligations.
-
Marketing consents: Until consent withdrawal.
After these periods, data are blocked and securely deleted in accordance with Article 30 of the LFPDPPP Regulations.
5. Data Breach Notification
In the event of a personal data breach, we will notify INAI and affected individuals within 72 hours of confirming the incident, detailing nature, scope, affected data categories, mitigation measures, and your available protections, as recommended by INAI’s “Recomendaciones para el Manejo de Incidentes de Seguridad”
6. Your Rights (ARCO) and How to Exercise Them
Under Articles 26–29 of the LFPDPPP, you have the right to:
-
Access your personal data.
-
Rectify any inaccuracies.
-
Cancel your data in our records.
-
Object to certain processing activities.
To exercise your ARCO rights, send a written request to All.Seasonstours.business@gmail.com or to our address, including:
-
Your full name and contact information.
-
Clear description of the data and rights you wish to exercise.
-
Copy of official identification or legal representation documents.
8. International Data Transfers
We will only transfer data abroad under the conditions set forth in Articles 36–37 LFPDPPP: with your explicit consent, when required by contract, or under legally permitted exceptions. All transfers to entities outside Mexico will be subject to binding agreements ensuring an “adequate level of protection” for your data
9. Automated Decision‑Making & Profiling
We do not engage in fully automated decision‑making or profiling activities that produce legal or similarly significant effects without your explicit consent. Any future use of AI or profiling tools will be disclosed and require your prior authorization, per Global Privacy Assembly recommendations
10. Changes to This Privacy Notice
Material changes will be published on our website and emailed directly to affected data subjects 30 days before taking effect, as required by Article 16(VI) LFPDPPP
11. Processing of Minors’ Data
We require parental or legal guardian consent before processing personal data of minors under 18, in line with Articles 22 and 21 LFPDPPP (the latter safeguarding confidentiality obligations). All ARCO requests for minors’ data must be submitted by their legal representative.
12. INAI Contact & Complaints
If you wish to escalate your complaint, you may contact INAI:
-
Website: https://www.inai.org.mx
-
Email: contacto@inai.org.mx
-
Phone: +52 55 5080 2000
-
Mail: Calle Victoria 137, Col. Centro, C.P. 06000, Ciudad de México
12. All Seasons Tours Contact Information
For any questions or to exercise your rights:
-
Data Protection Officer: All.Seasonstours.business@gmail.com | +52 (998) 484 ‑ 6982
-
Postal Address: Avenida Kukulcán km 12.5, Zona Hotelera, Cancún, Quintana Roo, México.
