Privacy Policy

1. Who is responsible for your data

Villas Ambar is the controller (responsable) of the personal data described here. We rent and manage private villas in Tulum, Quintana Roo, Mexico.

• Address: C. 3 Pte. SM 15, La Veleta, 77760 Tulum, Quintana Roo, Mexico
• Telephone: +52 984 131 4006
• Email: villasambar.mx@gmail.com

This page is our privacy notice (aviso de privacidad) under Mexican data protection law, and it is written to be useful to visitors from anywhere.

2. What this policy covers

It covers this website and the enquiries you send us through it. It does not cover the other websites we link to — booking platforms, maps, social networks — which have their own policies.

The terms that govern bookings themselves are in our Terms & Conditions.

3. What we collect

What you give us

Our enquiry forms ask for:

• your first and last name;
• your email address — the only field we require;
• your telephone or WhatsApp number, on the property management form;
• the nature of your enquiry: a stay, property management, an experience, or an event;
• if you are a villa owner, the area and the size of your property;
• and whatever you choose to write in the message box.

If you reach us by telephone, email or WhatsApp instead, we hold whatever you tell us there.

What is recorded automatically

When you send a form, the website stores your IP address, your browser’s user-agent string, the page you sent it from, and the date and time, alongside your answers. This is ordinary anti-spam and audit information, and it is kept with the enquiry.

Browsing the site also generates measurement and advertising data, described in section 5.

What we never collect here

We take no payments on this website, so we never see or store your card details. We do not ask for passport, identity or bank information through this site. There are no user accounts — registration is disabled — comments are switched off everywhere, and we run no newsletter from this site.

4. Why we use it

• To answer you and prepare a quotation. This is the main purpose, and it is what you asked us to do.
• To arrange and run your stay, if the enquiry becomes a booking.
• To discuss managing your villa, if you are an owner.
• To keep the site secure and to detect abuse and spam.
• To measure how the site is used, and to advertise. See section 5.
• To meet our accounting and legal obligations.

We do not sell your personal data, and we do not share it for anyone else’s marketing.

5. Cookies, measurement and advertising

Beyond what is strictly needed to make the site work, this website uses:

• Google Analytics 4 (Google) — counts visits and shows how pages are used. It is switched off for logged-in administrators.
• Meta Pixel (Meta Platforms) — records that a page was viewed, so advertising can be measured and audiences built.
• GTranslate — remembers the language you picked.
• LiteSpeed Cache — serves pages faster.
• Wordfence — security; it processes IP addresses to block attacks on the site.
• WhatsApp button (Meta) — opens WhatsApp when you tap it. Nothing is sent until you send a message.

Most of these set cookies or similar identifiers in your browser. You can block or delete them at any time in your browser settings, and you can use a tracking-protection setting or a blocker. Google publishes a browser add-on that opts you out of Google Analytics, and advertising preferences can be changed in your Meta account settings.

Blocking cookies does not stop you using this site; a few things may simply work less smoothly.

6. Who else sees it

We share your data only with those who need it:

• The owner of the villa you enquire about or stay in.
• The suppliers involved in your stay — a chef, a driver, a guide, an event supplier — and only the details they need to do their part.
• The developer who maintains this website, who receives a copy of form enquiries so that failures can be diagnosed.
• Our hosting and email provider, Hostinger, which stores this site and its database and carries our mail.
• Google and Meta, for the measurement and advertising described above.
• Public authorities, where the law requires it.

7. Where your data goes

Villas Ambar operates from Mexico. This website, its database and our mail are held by our hosting provider; our enquiry mailbox is a Google service; and measurement and advertising data reach Google and Meta. Your data may therefore be processed outside your own country, and outside Mexico. We share it only for the purposes set out above.

8. How long we keep it

Enquiries sent through this website are stored both in the website’s database and in our mailbox. We keep them for as long as we may need them to answer you, to run a stay, or to meet accounting and legal obligations, and we delete them when they no longer serve any of those purposes.

Measurement and advertising data are kept for the retention periods set by Google and Meta.

You can ask us to delete your enquiry sooner — see section 10.

9. How we protect it

The site is served over HTTPS, the administration area is restricted and protected by a security plugin that blocks repeated login attempts, and the site and its database are backed up. No system is perfectly secure, but we take reasonable measures and keep the site updated.

10. Your rights

Mexican law gives you ARCO rights over your personal data: Access to it, Rectification when it is wrong, Cancellation when it should no longer be held, and Opposition to a particular use. You may also withdraw your consent, and ask us to limit the use or disclosure of your data.

Depending on where you live you may have further rights — for instance to receive a copy of your data in a portable form, or to object to advertising profiling. We apply those on request wherever we reasonably can, whatever your country.

To exercise any of them, write to villasambar.mx@gmail.com, ideally from the address you contacted us with, and tell us what you want. We may need to confirm your identity first, and we will reply as quickly as we can and within the period Mexican law allows. There is no charge, unless you ask repeatedly for the same thing in a short period.

11. Children

This site is meant for adults arranging travel, and we do not knowingly collect data from children. Where children are part of a booking, we hold only what the lead guest gives us — usually a first name and an age, so the house can be prepared properly.

12. Other websites

When you follow a link to a booking engine, a listing platform, a map or a social network, you leave this site, and that service’s own privacy policy applies. We do not control what they collect.

13. Changes to this policy

We update this page when what we do changes. The date of the current version is shown at the top of the page.

14. Questions and complaints

Write to us first — villasambar.mx@gmail.com or +52 984 131 4006 — and we will try to put it right.

If you are not satisfied, you may complain to the competent Mexican data protection authority. Visitors in other countries may also be able to complain to their own national authority.

Villas Ambar — Tulum, Quintana Roo, Mexico
Send us a message · Terms & Conditions