Last updated: October 2026
This Privacy Policy explains how Ceniza Project (“Ceniza”, “we”) collects and uses personal data through this website, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
Who we are
Ceniza Project, Tulum, Quintana Roo, Mexico. For any question about your data, write to cenizatulum@gmail.com.
What we collect
- Contact form: your name, email address and the information you include in your message (for example dates, group size or type of event).
- WhatsApp: if you contact us through the WhatsApp button, we receive your phone number and the messages you send. That conversation is also subject to WhatsApp’s own privacy policy.
- Browsing data: technical information such as IP address, browser, device and pages visited, collected through cookies and analytics tools.
We do not ask for sensitive personal data.
How we use it
- To answer your enquiries and prepare quotes.
- To organise and manage stays, retreats and events.
- To understand how the website is used and improve it.
- To comply with legal obligations.
We do not sell or rent your personal data.
Who we share it with
Only with service providers that help us run this website and our communications (hosting, email and analytics providers), and only to the extent needed for the purposes above; or with authorities when required by law.
Cookies
This website uses essential cookies to work properly and analytics cookies (such as Google Analytics) to understand how it is used. You can block or delete cookies in your browser settings; some features may not work as expected.
How long we keep it
We keep your data only for as long as needed for the purposes described here or as required by law.
Your rights
You can access, rectify, cancel or oppose the use of your personal data (ARCO rights) and withdraw your consent at any time. Send your request to cenizatulum@gmail.com with your name, a description of your request and a copy of an ID. We will reply within 20 business days.
Security
We apply reasonable administrative and technical measures to protect your data against loss, misuse or unauthorised access.
Changes
We may update this policy. The current version will always be published on this page, with its date of last update.