This Privacy Policy explains how [LEGAL ENTITY NAME], doing business as Six Two Four Hotel (“Hotel”, “we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit https://sixtwofourhotel.com (the “Website”), contact us, or make a reservation. It is our privacy notice under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its regulations, and it also covers the rights of visitors from the European Economic Area, the United Kingdom and California.
1. Who is responsible for your data
[LEGAL ENTITY NAME], [FULL ADDRESS], San José del Cabo, Baja California Sur, México.
Email: info@sixtwofourhotel.com · Phone: +52 624 123 2892
2. Personal data we collect
Information you give us
Event and group inquiries (Events page form): first and last name, email address, phone number, services you are interested in (wedding, corporate, retreat, private event), group size, budget, preferred date, start and end time, your message, and whether you want to receive news and updates.
Direct communications: the details you share when you email or call us.
Newsletter preferences: your email address and consent, if you opt in on the form.
Information collected when you book
Reservations are made on the Cloudbeds booking engine, not on our Website. Cloudbeds collects the details needed for your booking, such as name, contact details, stay dates, guests, special requests and payment information, and shares the booking data with us so we can manage your stay. We do not receive or store your full payment card number through the Website.
Information collected automatically
When you use the Website, we and our partners collect, through cookies and similar technologies: IP address, device and browser type, language, pages viewed, time spent, referring website or ad, approximate location, cookie and advertising identifiers, and actions such as clicking “Book Now” or “Check Availability”. Details are in our Cookie Policy.
Where our advertising conversion tools support it, an advertising partner may receive hashed (irreversibly scrambled) versions of contact details you provide, so it can match conversions to ads.
We do not knowingly collect sensitive personal data (such as health, religion or biometric data) through the Website. Please do not include it in free-text fields.
3. Why we use your data
Purpose
Data used
Legal basis (GDPR / UK GDPR)
Respond to event and general inquiries and prepare proposals
Inquiry form data, communications
Steps requested before a contract; legitimate interests
Manage reservations and your stay
Booking data from Cloudbeds
Performance of a contract
Send news, offers and updates you asked for
Name, email
Consent (withdraw any time)
Operate, secure and maintain the Website
Technical and session data
Legitimate interests
Measure and improve Website performance
Analytics data
Consent
Measure and run advertising, including remarketing and travel-ad audiences
Advertising identifiers, visit and conversion data
Consent
Comply with tax, accounting and other legal duties; handle claims
Booking and contact data
Legal obligation; legitimate interests
We do not use your data to make decisions based solely on automated processing that significantly affect you.
4. Analytics and advertising partners
The Website uses Google Analytics and Google Ads (including conversion tracking), the Meta Pixel, Microsoft Advertising (Bing UET), Sojern, and a booking-attribution service (Relay). These partners receive technical and behavioral data about your visit, and may use it for their own purposes under their own privacy policies. Non-essential tools run only if you consent through our cookie banner. See our Cookie Policy for details and opt-out options.
5. Who we share data with
Cloudbeds, our reservation and property-management provider.
Service providers that support the Website and our business: hosting, web maintenance and IT security, email and communications tools, and professional advisers.
Analytics and advertising partners listed in section 4.
Payment processors, through the booking engine.
Authorities, when required by law or to protect our rights.
Successors, in a merger, sale or reorganization of the business, under equivalent protection.
We do not sell your personal data for money. Under California law, sharing advertising identifiers with ad partners for cross-context behavioral advertising may count as a “sale” or “sharing”. You can opt out by rejecting marketing cookies, using “Cookie settings” in the footer, or contacting us.
6. International transfers
Our partners and providers may be located outside Mexico, including in the United States. Where we transfer data internationally, we do so as permitted by law, for example on the basis of your consent, the performance of a contract, or appropriate safeguards such as standard contractual clauses.
7. How long we keep your data
Inquiries: up to 24 months after our last contact, unless a contract results.
Newsletter: until you unsubscribe.
Booking and accounting records: as long as tax, accounting and other laws require (generally at least five years in Mexico).
Analytics and advertising data: according to the retention settings of each tool and the lifetime of each cookie.
After these periods we delete or anonymize the data.
8. Security
We use reasonable administrative, technical and physical measures to protect your data against loss, misuse and unauthorized access. No online transmission is completely secure, so we cannot guarantee absolute security.
9. Your rights
Everyone (including under Mexican law). You may access your data, rectify it, request its cancellation (deletion), oppose its use (the “ARCO” rights), limit its use or disclosure, and withdraw your consent at any time. To exercise these rights, email info@sixtwofourhotel.com with the subject “Privacy request”, including your full name, a way to contact you, a copy of an ID, and a clear description of your request. We will reply within the legal time limits, generally 20 business days. You may also contact the competent Mexican data protection authority if you believe your rights were infringed.
EEA / UK visitors. You also have the right to data portability, to restrict processing, to object to processing based on legitimate interests, and to lodge a complaint with your local supervisory authority.
California residents. You have the right to know what personal information we collect, use and disclose, to request deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. You may use an authorized agent to make a request.
To stop marketing emails, use the unsubscribe link in any message or contact us.
10. Children
The Website is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Third-party websites
The Website links to other sites (Cloudbeds, Facebook, Instagram, Tripadvisor) that have their own privacy practices. We are not responsible for them.
12. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top shows the latest version, and we will notify you of material changes where required by law.
13. Contact
Privacy questions or requests: info@sixtwofourhotel.com, or [LEGAL ENTITY NAME], [FULL ADDRESS], San José del Cabo, Baja California Sur, México.
