Your data,
in plain words

1. Who is responsible for your data

Community Concierge Your Trip Designer, S.A. de C.V. (“Community Concierge”, “we”), with registered office in Puerto Aventuras, Municipality of Solidaridad, Quintana Roo, Mexico, and tax ID CCY220810N7A, is responsible for the personal data you share with us through this website, by WhatsApp or by email. You can reach us at info@communityconcierge.mx.

2. What information we collect

What you give us. When you fill in a form, write to us on WhatsApp or send an email, we collect the details you choose to share: first and last name, email, phone number, nationality, travel dates, number of guests and their ages, the occasion of your trip, your interests, where you are staying, an approximate budget range, flight details for transfers, and any notes you add.

What we collect automatically. When you browse this site, measurement tools record technical data: pages visited, approximate location, device and browser type, IP address, referring site, and the campaign identifiers that brought you here (Google gclid, Microsoft msclkid, Meta fbclid, OpenAI oppref and UTM parameters). This is done through cookies and similar identifiers set by the providers listed in section 5.

Payment data. Depending on the booking, payment may be made by bank transfer, by card through a payment link processed by Stripe, or in cash where it applies; for some services the provider receives or processes the payment directly, through its own means. When you pay by card through Stripe, card numbers are entered directly on Stripe's secure pages and are never stored on this website or by us.

3. What we use it for

Primary purposes, which we need in order to serve you: answer your inquiry, prepare quotes and itineraries, make reservations with villas, transportation, boats, guides and venues, coordinate your services during your stay, issue quotes and payment receipts, and keep a record of the services provided.

Secondary purposes, which do not depend on the relationship: measure how the site is used, attribute inquiries to the advertising campaigns that generated them, and improve our pages. You can object to these secondary purposes by writing to us or by disabling cookies as described in section 5.

We do not send newsletters or promotional emails unless you ask for them.

4. Who we share it with and how

We share only what each party needs, and only to provide the services you request.

• Service providers such as villa owners and managers, transportation companies, boat operators, guides, restaurants and venues receive your name, the dates, the number of guests and, when relevant, flight and pickup details. They do not receive your email or phone unless the service requires direct contact.
• Technology providers that process data on our behalf: Netlify (website hosting and form delivery), Make (automation) and Airtable (our internal records) to receive and manage your inquiry; Stripe for the card payments we process; WhatsApp for messaging; and the measurement providers in section 5.
• Authorities, only when required by law.

How it is shared. Data travels over encrypted connections (HTTPS/TLS) and is held in accounts protected by authentication. Several of these providers are established in the United States, which means your data may be transferred outside Mexico under the protections each provider offers. We never sell, rent or trade your personal data.

5. Cookies and measurement

This site uses Google Analytics 4 and Google Ads (Google LLC), Microsoft Advertising (Microsoft Corporation), the Meta Pixel (Meta Platforms, Inc.) and the OpenAI Ads pixel (OpenAI) to measure visits and attribute inquiries to advertising. They set cookies or identifiers in your browser and receive the technical data described in section 2. The Meta Pixel uses the _fbp cookie and, when you arrive from a Meta ad, the _fbc cookie, which stores the ad click identifier. Your name, email and phone are never sent to these tools.

“My Trip” keeps the services you add in your own browser (local storage), on this device only. We receive that list only when you send it to us with the form or share it. You can remove it from this device at any time from My Trip or by clearing your browser data. When you choose “Share this trip”, we store only the list of services, with no personal data, to create the link: anyone with the link can view it, and it expires after one year.

You can block or delete cookies from your browser settings, and opt out of ad personalization at Google and Microsoft, and manage ads based on your activity at Meta. The site keeps working without cookies.

6. How we protect it

The website is served exclusively over HTTPS. Access to inquiries and records is limited to the two people who run Community Concierge, through accounts protected by authentication. Card data never passes through our systems. Provider accounts are reviewed and closed when no longer needed. If a security incident ever affected your data, we would notify you and the authorities as the law requires.

7. How long we keep it

We keep inquiry and service records for as long as needed to serve you and to meet our tax and accounting obligations in Mexico, and then delete or anonymize them. Measurement data is kept for the retention period set in each tool, currently up to fourteen months in Google Analytics.

8. Your rights

You may access the personal data we hold about you, correct it, ask us to delete it, object to its use, or withdraw your consent, as recognized by the Mexican Federal Law on Protection of Personal Data Held by Private Parties (ARCO rights). Write to info@communityconcierge.mx with your name, the right you want to exercise and a way to confirm your identity. We answer within twenty business days. If you are not satisfied, you may contact the Mexican data protection authority, INAI.

9. Minors

Our services are contracted by adults. When a booking includes children, the adult who makes the inquiry provides their ages solely so we can plan the trip appropriately.

10. Changes to this notice

We may update this notice to reflect changes in our services or the law. The current version is always published at this address, with the date of its last update below.

Last updated: September 28, 2026