How we handle
your information.

Who we are

Casonas MX is a Mexican boutique hospitality brand operating eleven restored historic homes within the UNESCO walled city of Campeche. The legal entity behind Casonas MX is registered in Mexico and operated by Sébastien and Irma. The data controller for this Privacy Policy is Casonas MX, contactable at [email protected].

What we collect

We collect only the information needed to host your stay or respond to your inquiry:

• Booking information: first and last name, email, phone number, country of residence, dates of stay, number of guests, and any special requests you share.
• Identification: for some bookings (especially direct WhatsApp reservations), a passport or ID may be requested at check-in for legal hospitality registration in Mexico. ID information is recorded only as required by Mexican law and not retained beyond what regulations require.
• Payment information: we do not collect or store credit card details on our website. All payment processing is handled by third-party platforms (Hospitable, Airbnb, Booking.com, Stripe via Hospitable). We see only summary information — amount paid, status — never card numbers.
• Communication content: emails, WhatsApp messages, and Instagram DMs you send us are retained as part of normal business correspondence.
• Website analytics data: aggregated and pseudonymized — pages visited, approximate location, device type. See "Cookies & analytics" below.

Why we collect it

We use the information we collect for the following limited purposes:

• To process and confirm your reservation, prepare the property, and host you well.
• To respond to questions you send us before, during, or after your stay.
• To comply with Mexican legal obligations (hospitality registration, lodging tax reporting, accounting and tax records).
• To send occasional follow-up communications about your specific reservation. We do not send marketing newsletters unless you have explicitly opted in.
• To improve the website and understand how it is used (in aggregate).

Third parties we work with

To run our hospitality operation we work with the following platforms. Each has its own privacy policy, which governs the data they hold about you:

• Hospitable — our property management system. Handles bookings, calendars, guest communications, and payment processing.
• Airbnb and Booking.com — distribution platforms where some properties are listed. If you book through these platforms, their privacy policies apply to that booking.
• Stripe (via Hospitable) — payment processor for direct bookings.
• Google Analytics 4 — website analytics (pageviews, sessions, anonymized IPs).
• Meta Pixel — site visitor tracking for Instagram/Facebook ads, where applicable.
• Cloudflare — content delivery network and security; Cloudflare may briefly process your IP address as part of standard request routing.

We do not sell your data. With Advertising on, which is the default, some data is shared with Google and Meta for the purposes described in the cookies section. You can turn it off at any time from “Cookie settings” at the bottom of every page.

Cookies & analytics

This website uses three types of cookies and similar technologies:

• Necessary: they make the website work and keep it secure (for example, Cloudflare security) and store your cookie choice in your browser. They are always on.
• Measurement (Google Analytics 4): helps us understand how the website is used. It is on by default and you can turn it off.
• Advertising (Google Ads and Meta Pixel): used to measure the results of our ads and to show ads to people who have visited the website. It is on by default and you can turn it off.

The Measurement and Advertising tools are loaded from your first visit, without a prior notice and from any location. You can turn off either or both of them at any time from “Cookie settings” at the bottom of every page.

The choice you save from that link is remembered for six months, and you can change it whenever you like. When you turn a tool off, it stops sending data from the page and the website deletes the cookies it has stored in your browser that it allows the website to delete.

If you keep Measurement on and turn Advertising off, the website does not load Google Ads or Meta Pixel and blocks, on its pages, the requests to Google advertising services that we have identified. Google’s processing of measurement data is also governed by its own terms.

The booking calendar on each property page is provided by Hospitable within its own frame, and payments are processed by Stripe. Inside that calendar, Hospitable loads its own tools, including PostHog, an analytics tool that may record sessions of calendar use, as well as Stripe. This website’s cookie manager does not control those tools: they are not stopped when you turn off Measurement or Advertising here. The privacy policies of Hospitable and Stripe also apply to that use. Cloudflare, our network provider, may also record technical visit statistics independently of these settings.

You can also block or delete cookies in your browser settings. Turning off Measurement or Advertising does not prevent you from making a booking with us.

Retention

We retain personal information only as long as necessary for the purposes for which it was collected:

• Booking and stay records: 5 years after your stay (Mexican accounting law).
• Communications (email, WhatsApp): generally 2 years, then archived or deleted.
• Analytics data: aggregated retention per Google Analytics defaults (14 months).
• Marketing list (if you opted in): until you unsubscribe.

Your rights

Under Mexican federal law (LFPDPPP) and similar standards in your country of residence, you have the right to:

• Access the personal information we hold about you;
• Rectify incorrect data;
• Cancel or request deletion of your data, where retention is no longer required by law;
• Oppose certain uses of your information;
• Withdraw consent for any processing that depends on your consent.

To exercise any of these rights, write to [email protected] from the email address associated with your booking, or contact us via WhatsApp. We respond within five business days.

Contact

For privacy questions or data requests:

• Email: [email protected]
• WhatsApp: WhatsApp
• Postal address: Casonas MX, Calle 59 #17, Colonia Centro, 24000, San Francisco de Campeche, Campeche, México