Privacy notice

1.Who is responsible for your data

Lucio Fabián Martínez Delgado, who operates under the trade name Lucid Adventures Vallarta, with address at Marina Real 605, Col. Albatros, C.P. 48315, Puerto Vallarta, Jalisco, México, is the party responsible for processing your personal data.

For anything about your data, write to [email protected] or call +52 322 128 5901. That is where the person who handles personal-data requests will help you.

2.What data we process

We only process the data you give us when you reserve or write to us:

• Identification and contact: full name, email and, if you provide it, phone or WhatsApp.
• Your reservation: date, time, departure point, boat, number of guests, the stops, activities and extras you choose (with their options; for example, how many meals are vegetarian), your booking number and, if you ask to cancel, the reason you choose to give.
• Your payments: amounts, dates, payment method (card or SPEI) and the status and reference of each payment or refund. We do not receive or store your card number, expiry date or security code. If we return a payment made by SPEI, we will ask for the account details (holder and CLABE) only to make that transfer.
• Messages: what you write or tell us on WhatsApp, by email or by phone.
• Technical data: your IP address, which our servers use for a moment to limit repeated attempts and protect the site.

We do not ask for sensitive personal data (for example, health, religion or ethnic origin). Please don’t include it in free-text fields or in your messages.

Reservations must be made by adults. About your companions we only ask how many they are: we don’t ask for their names or ages.

3.What we use your data for

We use it only for what is needed to give you the service you book (necessary purposes):

• Creating your reservation, holding your boat and managing it.
• Charging your deposit and your balance, and making any refunds due.
• Sending you your confirmation, your receipts and payment instructions and notices about your reservation, and contacting you about your trip (for example, about the weather or the meeting point).
• Letting you look up your reservation with your booking number and your email.
• Handling your cancellation or date-change requests, your questions and your complaints.
• Meeting our legal obligations (for example, tax and consumer protection) and answering requests from authorities.
• Keeping the site secure: preventing abuse and duplicate charges.

Because these uses are necessary to fulfil your reservation, the Law does not require a separate consent (article 9, section IV).

We have no secondary purposes: we don’t use your data for advertising, marketing or sales prospecting, we don’t build profiles, and we don’t make automated decisions that evaluate you. If we ever wanted to use it for something else, we would ask for your consent first.

4.Who we share it with

We don’t sell or rent your data, and we don’t share it with anyone for advertising. Only those who help us give you the service receive it:

• Providers working on our behalf (the Law calls them processors, “personas encargadas”): hosting for the site and the database (Cloudflare and Railway) and the sending of your reservation emails (Resend). They may only use your data on our instructions. Some store information on servers outside Mexico.
• The payment processor. To pay, we take you to the payment page of ArqIA, which processes with OpenPay. We send them your email, the amount and your booking number. You give your card details directly to them, under their own privacy notice.
• The people who serve you on board. The captain and crew of your boat receive what they need for your trip: the name of the person who booked, the number of guests, the itinerary and the extras.
• Authorities, when a law or an order from a competent authority requires it.

These disclosures are necessary to fulfil your reservation or are required by law, so they do not need your consent (article 36 of the Law). We make no other transfer of your data.

5.Cookies and storage in your browser

This site uses no cookies, no analytics tools, no advertising pixels and no other tracking technology.

So you don’t lose your progress, we keep in your own browser (not on our servers):

• The draft of your plan (date, group, boat, stops and extras). It is erased when you pay your deposit or when you choose “Start over”.
• What you type before paying (name, email and phone) and a technical key that prevents your reservation from being duplicated. It is erased when you pay your deposit or when you close the tab.

You can erase them whenever you like from your browser’s settings.

Your browser also connects to third-party services, which receive your IP address like any site you visit: Fontshare, where the site’s typefaces are loaded from, and, when you pay, the payment page of ArqIA and OpenPay, which may use its own cookies. The links to WhatsApp and Instagram take you to those services, which have their own privacy notices.

6.How long we keep it

We keep your reservation and payment data while your reservation is active and, afterwards, for the periods required by tax, commercial and consumer-protection law, or for as long as needed to handle a claim. After that we block and delete it, as the Law requires.

7.How we protect it

• The connection to the site is encrypted (HTTPS).
• Your card details never pass through our systems.
• Your reservation only opens with its private link, or with your booking number and your email, and we limit repeated attempts. On that page your email and phone appear partly hidden.
• Only authorized staff enter the system, each with their own account and password, and cancellations and refunds are logged.

Look after your reservation link: whoever has it can see your reservation. If a security breach significantly affects your rights, we will tell you immediately.

8.Your rights and how to use them

You have the right to access your data, to rectify it if it is inaccurate or incomplete, to cancel it (ask us to delete it) and to object to its use (known in Mexico as ARCO rights). You can also withdraw your consent and ask us to limit the use or disclosure of your data.

How to make your request

Write to [email protected] with the subject “Personal data” and include:

• Your name and how you want to receive our answer.
• A document proving your identity (or, if you act for someone else, also the one proving you represent them).
• Which right you want to exercise and over which data. For a correction, tell us what to change and attach the supporting document.
• Anything that helps us find your data, such as your booking number.

Deadlines

We answer within 20 business days of receiving your request. If it proceeds, we carry it out within 15 business days after our answer. Each period may be extended once, for an equal period, when the case justifies it (article 31 of the Law). The process is free; we could only charge reproduction or delivery costs.

When we cannot delete your data

We cannot delete data we need to fulfil an active reservation or that a law requires us to keep (for example, payment records). In those cases we block it and delete it when the period ends.

Limiting the use of your data

We send no advertising, so there is nothing to unsubscribe from. The phone is optional: you can reserve without it, or ask us to contact you by email only, by writing to [email protected].

If you disagree with our answer

You can file a data-protection request with Mexico’s Secretaría Anticorrupción y Buen Gobierno within 15 business days after the date we answer you, or once our deadline has passed if we did not answer (article 40 of the Law).

9.Changes to this notice

If we change this notice, we will publish the new version on this page with its update date. If a change meant using your data for a different purpose, we would ask for your consent first.

This notice is written in Spanish; the English version is a courtesy translation. The cancellation and refund rules are in the cancellation policy.