Privacy Notice

Controller: Abraham Jesús Marrufo Tabasco, located at C 17 C 10 y 14, sin número, Río Lagartos, Yucatán, CP 97720, Mexico.

Data processed: contact details, travel preferences, Travel Designer conversation data and technical observability data, website analytics events, and connection/device information. We do not intentionally request sensitive personal data.

Main purposes: provide tourism information, prepare personalized tour proposals, contact you, operate Travel Designer, detect errors, measure performance, and understand aggregated website use. Optional purposes that require your consent include promotional communications and non-essential analytics where applicable.

You may limit use or disclosure and exercise your ARCO rights by contacting: ajmtc9@outlook.com. This simplified notice is complemented by the full Privacy Notice below.

The entity responsible for the processing of your personal data is: Abraham Jesús Marrufo Tabasco, located at C 17 C 10 y 14, sin número, Río Lagartos, Yucatán, CP 97720, Mexico.

Email: ajmtc9@outlook.com | Phone: (999) 417-6764

Through our website and the Travel Designer (AI chatbot), we may collect the following personal data when you choose to provide it: full name, email address, phone number, travel preferences, requested destinations, dates, group size, budget, and additional notes related to your tour request.

For technical observability and service improvement, we may also process Travel Designer conversation traces, input and output tokens, latency, errors, agent tool calls or technical events, and aggregated website usage events.

We do NOT intentionally collect sensitive personal data such as financial information, medical data, biometric data, ethnic origin, religious beliefs, political affiliation, sexual orientation, or union membership. Please do not provide sensitive or unnecessary personal information through the chatbot or analytics-related interactions.

Purposes that do not require separate consent because they are necessary to provide the requested service: responding to your inquiry, preparing a personalized tour proposal, contacting you about that request, operating the website and Travel Designer, maintaining security, preventing abuse, detecting technical errors, measuring latency and performance, and keeping evidence of requests when necessary.

Purposes that may require consent or may be limited by you: sending promotional communications, newsletters, or marketing content; and using non-essential analytics or tracking technologies when they process personal data beyond what is strictly necessary.

Analytics purposes: To measure visited pages, traffic sources, aggregated events, and non-invasive usage metrics through Umami so we can improve navigation, content, and conversion toward contact or tour design. We do not intentionally send names, emails, phone numbers, free-form chat text, or unnecessary personal data to Umami events.

We do not use your data for unrelated or analogous purposes without providing the legally required notice or obtaining consent when applicable.

Travel Designer uses automated AI processing to interpret the information you provide, identify relevant preferences such as destinations, dates, budget, group size, pace, and interests, and generate suggested tour ideas or follow-up questions.

The expected consequence of this processing is a non-binding recommendation or proposal. The chatbot does not automatically confirm reservations, process payments, approve or deny services, or make legally binding decisions without human intervention.

Human supervision is available: you may request that a person review the recommendation, continue the conversation through WhatsApp or email, or object to automated processing by contacting us at ajmtc9@outlook.com.

We do not sell your personal data. We may use third-party service providers as processors or independent services needed to operate the website and Travel Designer.

OpenRouter (openrouter.ai) processes Travel Designer conversations to provide AI functionality. OpenRouter has its own data retention policy, available at: https://openrouter.ai/privacy

Laminar is used for technical and LLM observability of Travel Designer, including traces, input/output token counts, latency, errors, and technical tool-call events. This helps us debug and improve the service.

Umami is used for privacy-friendly web analytics, including visited pages, traffic sources, aggregated events, and non-invasive usage metrics. We do not intentionally send names, emails, phone numbers, free-form chat text, or unnecessary personal data to Umami events.

Some providers may be located outside Mexico, which may involve international transfers or remote processing. By using Travel Designer or submitting information through the website, you acknowledge that these providers may process data under their own terms and privacy policies, which we do not control. Where the law requires express consent for a specific transfer, we will request it before carrying it out.

You have the right to: Access your personal data that we hold. Rectify data that is inaccurate or incomplete. Cancel data when you consider it is no longer necessary for the stated purposes. Oppose the processing of your data for specific purposes.

To exercise any of these rights, send an email to: ajmtc9@outlook.com with your full name, email address associated with your account, a clear description of the right you wish to exercise, and documents proving your identity.

We will respond to your request within a maximum period of 20 business days.

If you wish to limit the use of your data for secondary purposes (promotions, newsletters, etc.), send an email to ajmtc9@outlook.com with "Data Use Limitation" in the subject line.

We keep personal data only for the time necessary to fulfill the purposes described in this notice, comply with legal obligations, resolve disputes, or maintain operational records. When data is no longer necessary, it will be blocked and then deleted or anonymized when appropriate.

We implement administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing.

Our website has an SSL (HTTPS) certificate that encrypts the transmitted information.

If a security incident significantly affects your economic or moral rights, we will notify you without undue delay through the contact information available to us and will describe the nature of the incident and the recommended measures.

We classify tracking technologies by purpose: necessary technologies for site operation and security; analytics technologies for aggregated measurement; and external service technologies used by providers that enable AI, hosting, or observability.

Our website does not use first-party advertising cookies. Umami is configured as a lightweight analytics tool focused on aggregated metrics and does not require us to send personally identifying event data.

Umami may process technical request information necessary to provide analytics, such as visited pages, referrers or traffic sources, browser/device information, and aggregated events. According to the way we use it, analytics events should not include personal data such as names, emails, phone numbers, or free-form chat content.

Other third-party services may indirectly collect technical data: web hosting servers may register IP addresses and connection data; OpenRouter processes Travel Designer conversations; and Laminar processes technical observability data for Travel Designer.

You can disable or limit cookies and tracking technologies through your browser settings, although doing so may affect some site functionality.

If you consider that your personal data protection rights have been violated, you may contact the competent Mexican data protection authority. Following the 2025 institutional changes, the competent authority is linked to the Secretaría Anticorrupción y Buen Gobierno / Transparencia para el Pueblo, subject to the applicable regulations in force.

We reserve the right to modify this Privacy Notice at any time. Any changes will be published on this same page.

Date of last update: June 23, 2026

By providing your personal data through our website or chatbot, you acknowledge that you have read, understood, and accept the terms of this Privacy Notice.