Privacy notice

この法的文書はスペイン語と英語でご覧いただけます。現在、英語版をご覧になっています。

Last updated: October 20, 2026

1. Data controller

The company that runs Directo Tours and Directo Transfers is responsible for your personal data. For any privacy matter, write to us on WhatsApp at +52 984 218 2623 or through the Contact page.

2. What data we keep

What you give us when booking or writing to us

• Name, email and phone.
• Service details: date, number of adults, children and infants, hotel or pickup address, meeting point.
• For transfers: flight number, arrival or departure time, hotel and, if you mark it, the exact pickup spot on the map.
• Whatever you write in the contact form, on WhatsApp or in a voice message if you call us.
• Your review, if you choose to leave one.

If you sign in with Google or Apple

• Only your name and email. We never receive your password.

From the payment

• Payments are processed by Stripe. We do not store your card number. We keep the payment ID, the amount, its status (paid, refunded) and any discount code used.

Automatic

• Your language and the cookies the site needs to work (see point 7).
• If you came from the link of an accommodation or partner, we keep that to know where the booking came from.
• Your IP address, temporarily, to prevent abuse (too many attempts in a row).

We don't ask for sensitive data. If you tell us something about health or mobility so we can adapt the service, we use it only for that.

3. What we use it for

Needed to provide the service

• Making and managing your booking, charging it and, if applicable, refunding it.
• Sending you the confirmation, reminders, changes and notices about your booking by email and WhatsApp.
• Coordinating the service with the operator (driver, guide, captain).
• Answering questions, complaints and requests.
• Meeting legal obligations and preventing fraud.

Optional

• Asking you for a review after the service and publishing it with your first name.

We don't send advertising today. You can object to the optional uses by writing to us on WhatsApp or through the Contact page.

4. Who we share it with

• The operator who provides your service: receives your name, phone, date, number of people, hotel and flight — what's needed to pick you up and look after you.
• The accommodation or partner whose link you booked from: only learns that the booking came from its link, to calculate its commission.
• Providers that help us operate, who handle the data on our behalf: Stripe (payments), Resend (emails), WhatsApp (messages), Twilio (phone and voice messages), Google and Apple (sign-in), Google Maps and RapidAPI (hotel suggestions and your flight details) and DigitalOcean (servers and database).
• Authorities, when the law requires it.

Some of these providers are outside Mexico (for example, in the United States). We don't sell your data.

5. How long we keep it

Booking data, for 5 years; after that it is deleted or made anonymous. Contact messages, 1 year.

6. Your rights (ARCO)

You can access, correct or delete your data, object to its use, and withdraw your consent. Write to us on WhatsApp or through the Contact page with your name, the email you booked with, your booking number if you have it, and what you need. We may ask you to confirm your identity before giving you or changing your data. We reply within 20 business days at most.

If you feel we didn't handle your request, you can turn to Mexico's personal data protection authority.

7. Cookies

We only use cookies the site needs to work:

We don't use advertising or analytics cookies. The payment page belongs to Stripe and uses its own cookies.

8. Security

Links to "My booking" carry a unique key; don't share them. Access to the data is limited to the staff and operators who need it. No system is infallible; if an incident affects your data, we will let you know.

9. Minors

The site is for people aged 18 and over. For minors who travel, we only keep how many there are.

10. Changes

We will publish any change to this notice on this page, with its date.