How We Handle
Your Information

1. Who We Are

Golf XP Cabo is a boutique destination management company (DMC) and IAGTO member based in San José del Cabo, Baja California Sur, Mexico. We operate as a persona física con actividad empresarial under Mexican law.

For the purposes of this policy, the data controller is:

• Manuel Marván (Golf XP Cabo)
• San José del Cabo, Baja California Sur, México
• Email: contact@golfxpcabo.com

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us, primarily through our enquiry forms. This may include:

• Name and surname
• Email address
• Phone number or WhatsApp contact
• Company name (for corporate and trade enquiries)
• Travel preferences, group size, and dates
• Any additional information you choose to share in the message field

We do not collect sensitive personal data such as financial account information, health data, or government identification numbers.

3. How We Use Your Data

Your personal data is used solely for the following purposes:

• To respond to your enquiry and prepare a tailored travel proposal
• To communicate with you regarding your booking or trip planning
• To send relevant information about our services if you have expressly requested it

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under Mexico's LFPDPPP, we process your data based on your consent, provided when you submit an enquiry form on our website.

For visitors from the European Union, our legal basis under the GDPR is your explicit consent (Article 6(1)(a)) and, where applicable, the performance of a contract or pre-contractual steps at your request (Article 6(1)(b)).

5. Third-Party Services

We use a limited number of third-party services to operate our website and process enquiries:

• Formspree — processes form submissions on our behalf. Formspree stores submitted data on secure servers. Their privacy policy is available at formspree.io.
• Cloudflare — provides DNS, security, and performance services for our website. Cloudflare may set essential security cookies. Their privacy policy is available at cloudflare.com.
• Google Fonts — serves typography assets. Google may log request data. Their privacy policy is available at policies.google.com.

We do not currently use advertising, tracking, or analytics cookies. Should this change, this policy will be updated and a consent mechanism will be implemented accordingly.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Enquiry data is retained for a maximum of two years from the date of last contact. If no booking results from an enquiry, data is deleted within six months.

7. Your Rights

Under Mexico's LFPDPPP, you have the right to Access, Rectification, Cancellation, and Opposition (known as ARCO rights) regarding your personal data.

Under the GDPR, if you are located in the European Union, you additionally have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.

Visitors from the United States, including California residents, may also request access to or deletion of their personal data by contacting us at the address below. We honor these requests regardless of applicable legal thresholds.

To exercise any of these rights, please contact us at contact@golfxpcabo.com. We will respond within 20 business days as required by the LFPDPPP.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmitted through our website is protected via HTTPS encryption.

9. International Data Transfers

Our website is operated from Mexico. If you are accessing our website from the European Union or other regions with laws governing data collection and use, your data may be transferred to and processed in Mexico and the United States (via Formspree). By submitting an enquiry, you consent to this transfer.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at:

• Email: contact@golfxpcabo.com
• Website: www.golfxpcabo.com