Privacy Policy

1. Who Is Responsible for Your Data

Amanah Vacations, based in Playa del Carmen, Riviera Maya, Quintana Roo, Mexico, is the party responsible ("responsable") for the collection and use of your personal data described in this notice.

Business name: Amanah Vacations. Registered address: Calle 11 Sur, entre Av. 55 y 65, Ejidal, C.P. 77710, Playa del Carmen, Quintana Roo, Mexico. For any question about how your personal data is handled, please contact us using the details in Section 14.

2. What Data We Collect

We collect the following categories of personal data, depending on how you interact with us:

We do not knowingly collect sensitive personal data (such as health, religious, or biometric information) unless you voluntarily provide it to us — for example, if you disclose a dietary requirement, health condition, or accessibility need relevant to planning your trip. Where this occurs, we treat that information with additional care and only use it for the purpose you shared it.

3. Why We Collect It

Necessary Purposes (required to provide our services)

• To process your booking, quote request, or payment
• To communicate with you about your trip, including confirmations, itinerary details, and any changes
• To coordinate your booking with relevant third-party service providers (hotels, tour operators, transport)
• To respond to questions, requests, or complaints
• To comply with legal, tax, and regulatory obligations under Mexican law

Voluntary Purposes (you may opt out of these)

• To send you promotional offers, seasonal packages, or newsletters via email or WhatsApp
• To improve our website and services based on browsing behavior (see Section 6 on cookies)

You may opt out of voluntary purposes at any time without affecting your ability to book or receive services from us. See Section 10 for how to do this.

4. Consent

By providing your information to complete a booking or contact us, you give your tacit consent for us to process it for the necessary purposes described above, consistent with Mexican law. Where we ask you to opt in separately — such as for promotional communications, or where you share sensitive information voluntarily — we will request your express consent at that time.

You may withdraw your consent at any time, as described in Section 10, without retroactive effect on processing already carried out.

5. Who We Share Data With

We share your personal data only as necessary to deliver the services you've booked, including with:

• Third-party service providers directly involved in your trip — hotels and villas, tour and activity operators, transportation providers, and restaurants — solely to the extent needed to fulfill your booking (e.g., your name, travel dates, and group size).
• Payment processors that securely handle your transaction (see Section 7).
• Our website and booking platform provider, which hosts our site and cart/checkout system.
• Government or regulatory authorities, where legally required.

We do not sell your personal data to third parties for their own marketing purposes.

6. Cookies & Tracking

Our website uses cookies and similar technologies to operate correctly, remember your preferences, and understand how visitors use our site.

Essential Cookies

These are necessary for the website and booking cart to function (for example, keeping items in your cart as you browse). These cannot be disabled without affecting site functionality.

Analytics & Marketing Cookies

These help us understand site traffic and improve our offerings, and may be used for marketing purposes. Because we welcome visitors from around the world, we ask for your affirmative consent before activating these cookies, regardless of your location — you will see a cookie preference option when you first visit our site, and you may change your choice at any time.

7. Payment Information

Payments made through our website are processed by our website platform's secure payment infrastructure. Amanah Vacations does not directly receive, view, or store your full card number, CVV, or other complete payment credentials — these are handled entirely by our payment processor in accordance with PCI-DSS security standards.

8. How We Protect Your Data

We implement reasonable administrative, technical, and physical security measures designed to protect your personal data against loss, unauthorized access, alteration, or misuse. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.

If a security incident occurs that significantly affects your personal data, we will notify you and take appropriate steps in accordance with applicable Mexican law.

9. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfill the purposes described in this notice, including any period required to comply with legal, accounting, or tax obligations under Mexican law. Booking and communication records are typically retained for 5 years after your trip, after which they are securely deleted or anonymized, unless a longer period is legally required.

10. Your ARCO Rights

Under Mexican law, you have the right to:

To exercise any of these rights, contact us using the details in Section 14. There is no charge to exercise your ARCO rights. We will respond within the timeframe required under applicable Mexican law, and may request identity verification before processing your request.

11. International Visitors

Amanah Vacations is based in Mexico, and your data is primarily processed and stored in accordance with Mexican law. If you are visiting from outside Mexico — including the United States, Canada, the European Union, the United Kingdom, or elsewhere — please be aware that your data will be transferred to and processed in Mexico in order to arrange your trip. We take reasonable steps to protect your data consistent with this notice regardless of where you are visiting from.

12. Children's Data

We collect limited information about children (such as first names and ages) only when provided by a parent or guardian as part of a family booking, solely to arrange age-appropriate services. We do not knowingly collect personal data directly from children without parental involvement.

13. Changes to This Notice

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a new "Last updated" date. We encourage you to review this page periodically.

14. Contact Us