Privacy notice

Who is responsible for your data

Mérida Stays, located in Mérida, Yucatán, México, is responsible for the use and protection of your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. Contact: jorgecamposberny1215@gmail.com.

What data we collect

• Identity and contact: name, email, phone / WhatsApp and country of residence.
• About your stay: dates, number of guests, names of companions you register for access, and any comments you share with us.
• Payment: the method you choose, transfer receipts and payment status. Card details are processed directly by Stripe; we never see or store them.
• Technical: IP address and browser information, used only for security (to prevent abuse) and for the site to work.

We do not collect sensitive personal data.

Why we use it

Necessary purposes:

• To manage your booking: confirm it, process payment, and send you the confirmation, arrival guide and stay updates.
• To answer your questions and requests and handle any issue before, during or after your stay.
• To comply with legal, tax and security obligations, including any guest registration required by authorities.

Additional purpose (not necessary): to ask for a review after your stay and, occasionally, tell you about offers or new homes. If you do not want us to use your data for this, write to us at jorgecamposberny1215@gmail.com; it will not affect your booking.

Who we share it with

We do not sell or rent your data. To run this site we rely on providers that process it only on our behalf (some outside Mexico):

• Vercel (website hosting) and Supabase (database and files).
• Stripe (card payments).
• Google (email delivery through Gmail, and the site’s fonts).
• WhatsApp (Meta), only if you choose to message us there.

We may share your data without your consent when required by law or by a competent authority. With Airbnb we only share which dates are booked, never your personal data.

Your rights

You have the right to access, rectify or cancel your data and to object to its use (ARCO rights), and to withdraw your consent. Send your request to jorgecamposberny1215@gmail.com with your name, your booking code (if you have one), the right you want to exercise and a copy of an ID. We will reply within 20 business days and, if applicable, carry it out within the following 15 business days.

How long we keep it

For as long as needed for your booking and to meet legal and tax obligations; after that we delete or anonymize it.

Cookies

We only use necessary cookies: one to remember your language and one for the administration panel session. We do not use advertising or tracking cookies.

Changes to this notice

Any change will be published on this page with its update date. If you believe your right to data protection has been violated, you may contact the competent personal data protection authority.