How we handle
your information.

Who we are

Casonas MX is a Mexican boutique hospitality brand operating eleven restored historic homes within the UNESCO walled city of Campeche. The legal entity behind Casonas MX is registered in Mexico and operated by Sébastien and Irma. The data controller for this Privacy Policy is Casonas MX, contactable at [email protected].

What we collect

We collect only the information needed to host your stay or respond to your inquiry:

• Booking information: first and last name, email, phone number, country of residence, dates of stay, number of guests, and any special requests you share.
• Identification: for some bookings (especially direct WhatsApp reservations), a passport or ID may be requested at check-in for legal hospitality registration in Mexico. ID information is recorded only as required by Mexican law and not retained beyond what regulations require.
• Payment information: we do not collect or store credit card details on our website. All payment processing is handled by third-party platforms (Hospitable, Airbnb, Booking.com, Stripe via Hospitable). We see only summary information — amount paid, status — never card numbers.
• Communication content: emails, WhatsApp messages, and Instagram DMs you send us are retained as part of normal business correspondence.
• Website analytics data: aggregated and pseudonymized — pages visited, approximate location, device type. See "Cookies & analytics" below.

Why we collect it

We use the information we collect for the following limited purposes:

• To process and confirm your reservation, prepare the property, and host you well.
• To respond to questions you send us before, during, or after your stay.
• To comply with Mexican legal obligations (hospitality registration, lodging tax reporting, accounting and tax records).
• To send occasional follow-up communications about your specific reservation. We do not send marketing newsletters unless you have explicitly opted in.
• To improve the website and understand how it is used (in aggregate).

Third parties we work with

To run our hospitality operation we work with the following platforms. Each has its own privacy policy, which governs the data they hold about you:

• Hospitable — our property management system. Handles bookings, calendars, guest communications, and payment processing.
• Airbnb and Booking.com — distribution platforms where some properties are listed. If you book through these platforms, their privacy policies apply to that booking.
• Stripe (via Hospitable) — payment processor for direct bookings.
• Google Analytics 4 — website analytics (pageviews, sessions, anonymized IPs).
• Meta Pixel — site visitor tracking for Instagram/Facebook ads, where applicable.
• Cloudflare — content delivery network and security; Cloudflare may briefly process your IP address as part of standard request routing.

We do not sell, rent, or trade your personal information with any third party for marketing purposes.

Cookies & analytics

This website uses cookies for two purposes only:

• Essential cookies: needed for the site to function (e.g., Cloudflare security, session state).
• Analytics cookies: Google Analytics 4 and Meta Pixel use cookies to understand how visitors find and use the site. Aggregated data only.

You can disable cookies in your browser, opt out of Google Analytics with the official Google opt-out add-on, or block Meta Pixel via your privacy settings. Doing so will not affect your ability to make a booking with us.

Retention

We retain personal information only as long as necessary for the purposes for which it was collected:

• Booking and stay records: 5 years after your stay (Mexican accounting law).
• Communications (email, WhatsApp): generally 2 years, then archived or deleted.
• Analytics data: aggregated retention per Google Analytics defaults (14 months).
• Marketing list (if you opted in): until you unsubscribe.

Your rights

Under Mexican federal law (LFPDPPP) and similar standards in your country of residence, you have the right to:

• Access the personal information we hold about you;
• Rectify incorrect data;
• Cancel or request deletion of your data, where retention is no longer required by law;
• Oppose certain uses of your information;
• Withdraw consent for any processing that depends on your consent.

To exercise any of these rights, write to [email protected] from the email address associated with your booking, or contact us via WhatsApp. We respond within five business days.

Contact

For privacy questions or data requests:

• Email: [email protected]
• WhatsApp: WhatsApp
• Postal address: Casonas MX, Centro Histórico, Campeche, México (full address on request)