Privacy Policy
Draft prepared October 5, 2026 — Complete the legal name and address below before publication.
This notice explains how we collect, use and share personal information when you request information, submit a website form or arrange an experience through Baja Blue Experiences, including communications by email and WhatsApp.
1. Data Controller and Contact
Baja Blue Experiences is the trading name of [INSERT FULL LEGAL NAME OF INDIVIDUAL OR COMPANY], the controller responsible for the personal information described in this notice.
Address: [INSERT FULL POSTAL ADDRESS IN MEXICO].
Privacy contact: bajablueexperiences@gmail.com.
2. Information We Collect
Depending on your request or reservation, we collect your name, email address, phone number, preferred contact language, requested experience, travel or activity dates, group size and messages you send us. When needed to arrange boarding or transportation, we may request passenger names, ages or age ranges, and a hotel or pickup location.
When applicable, we also collect billing details, payment confirmations, transaction references and records of deposits, balances or refunds. Do not send full card numbers, security codes or card photographs through our forms, email or WhatsApp. If a payment provider is used, enter card details only through that provider’s authorized payment channel.
Our hosting and communications providers may process technical information such as IP addresses, browser and device details, timestamps and security logs to operate their services. We do not request identity documents unless a specific booking or legal requirement makes them necessary.
3. Why We Use Your Information
We use information to answer inquiries, prepare quotes, check availability, arrange and confirm bookings, coordinate with the selected operator, communicate departure details or changes, administer payments and refunds, and handle customer service requests.
We also use necessary records to meet accounting and legal obligations, prevent misuse and resolve disputes. Information required for a particular reservation will be identified when requested; without it, we may be unable to arrange that service.
4. Optional Marketing
Promotional emails and WhatsApp messages are optional and separate from communications needed to handle your inquiry or booking. We will ask for your permission before adding you to a promotional list.
You may decline marketing without affecting your reservation and may unsubscribe by replying STOP or UNSUBSCRIBE, or emailing bajablueexperiences@gmail.com. We will keep only the information needed to respect that choice. We do not sell or rent your personal information.
5. Independent Operators and Other Recipients
Baja Blue Experiences arranges experiences supplied by independent boat owners, charter companies, fishing operators and other activity providers. We share only the information needed with the operator or transportation provider selected for your booking, such as passenger details, activity date, pickup location and relevant coordination requests.
Those operators are responsible for their own processing and should make their privacy notices available to you. Their notices do not remove Baja Blue Experiences’ responsibility for the information it handles or the disclosures it makes.
Our website hosting, email, messaging and other technical providers process information to support our services. Professional advisers and competent authorities may receive information when necessary for legal obligations or the protection of legal rights.
Transfers necessary for your reservation or another applicable legal exception may occur without separate consent. For any transfer that requires consent, we will identify its recipient and purpose and obtain your separate acceptance or refusal before transferring the information. We will communicate the applicable privacy obligations to recipients.
6. Website Forms, WhatsApp and Cookies
Our customer contact channels include website forms, email and WhatsApp. WhatsApp and email providers process information under their own privacy notices and terms. Messaging us does not enroll you in promotional communications.
We have not configured advertising pixels or advertising analytics for this service. Our website platform may use essential cookies or similar technology for functions such as security and form operation. Browser settings allow you to manage cookies, although disabling them may affect some features.
Before introducing optional analytics, advertising cookies or tracking pixels, we will update this notice with the tools, information collected and purposes, and provide any choices or consent required by law.
7. Sensitive Information and Children
Our general inquiry forms are not intended to collect health information or other sensitive personal data. If an accessibility or safety request requires sensitive information, we will explain what is needed, why it is needed and who must receive it, and obtain explicit written consent where required. Please share only what is necessary.
Our booking channels are intended for adults. A parent or legal guardian must authorize the collection of a minor’s information when required to arrange an experience. If you book for other guests, ensure you are authorized to supply their information and make this notice available to them.
8. Photos and Videos
Participating in an experience does not automatically authorize Baja Blue Experiences to use your identifiable image in advertising. We will obtain separate permission before using identifiable guest photos or videos for promotional purposes. For minors, permission must come from a parent or legal guardian.
You may decline without affecting your booking. Operators may have their own photography practices; ask for their terms before the activity. Contact our privacy email to withdraw permission for future use by Baja Blue Experiences.
9. Security, Retention and International Processing
We use safeguards appropriate to the information we handle, limit access to people who need it for their duties, and require confidentiality. No storage or communication method can guarantee absolute security. If a breach significantly affects your rights, we will notify you as required by law.
We retain information only as needed for the purposes described, applicable legal retention periods and the resolution of claims. When it is no longer needed, we delete it or make it anonymous, subject to legally required blocking or preservation.
Technical providers may store or process information outside Mexico. Such processing remains subject to applicable safeguards and consent requirements; an overseas service does not remove our obligations under Mexican law.
10. Your Privacy Rights
You may request access, correction, cancellation or opposition to processing of your information (ARCO rights), withdraw consent, or limit its use or disclosure. Email bajablueexperiences@gmail.com with your name, a reply address, the right or request you wish to exercise, and details that help us identify the relevant records. For corrections, specify the change and supporting information.
We will explain how to verify your identity or authority to act for another person. Access can be provided electronically. We will communicate our decision within 20 days and implement an accepted request within the following 15 days, calculated under applicable law; justified extensions may apply. Exercising these rights is generally free.
Withdrawal of consent is prospective. Some information must remain available for legal obligations or ongoing contractual requirements. We will explain any limitation or refusal and the available avenues to challenge it.
11. Changes to This Notice
We will publish updates on the Privacy Policy page of the Baja Blue Experiences website and identify the revision date. Where a change requires new consent, we will request it before beginning the new processing. For questions or a copy of this notice, contact bajablueexperiences@gmail.com.