Privacy Policy

1. Who we are

Direct Booking Rentals S. de R.L. de C.V., doing business as Mar de Cortez Rentals ("we", "us"), with offices at Blvd. Benito Juárez 374B, 83556 Puerto Peñasco, Sonora, Mexico, is responsible for the personal information you share with us through this website and our messaging channels. For any privacy question or request, write to reservations@mardecortezrentals.com.

2. What we collect

• Booking details: your name, email, phone number, travel dates, number of guests, special requests and the property you book.
• Payment: card details are typed into secure fields provided by Stripe and go directly to Stripe. We never see or store your full card number.
• Messages: what you write to us through our contact form, the website chat, WhatsApp, Facebook Messenger, Instagram, email, or booking platforms such as Airbnb, Booking.com and Vrbo, along with the contact details those channels share with us.
• Website use: your IP address, browser and device type, pages visited and the site that referred you, collected through our server logs and through cookies and similar technologies (see section 7).
• Reviews you leave about your stay.

We do not ask for sensitive personal information (such as health, religion or biometric data).

3. How we use it

To provide your stay — these uses are necessary:

• Create and manage your reservation, take payments and issue invoices.
• Communicate with you before, during and after your stay (check-in, keys, access codes, support).
• Coordinate with our cleaning, maintenance and office staff and, when needed, the owner of the property you book.
• Prevent fraud, keep the site secure and comply with Mexican legal and tax obligations.

Other uses — you can ask us to stop these at any time (section 9):

• Measure and improve our website and our advertising.
• Send you offers and news by email, only if you agreed to receive them. Every marketing email includes an unsubscribe link.

4. Our AI assistant

Some replies on our chat channels are written by Marina, our AI assistant, built on Anthropic's Claude models. To answer you, the content of your messages and relevant reservation details are processed by Anthropic. Our team supervises these conversations, and you can always ask to speak with a person.

5. Who we share it with

We share personal information only with the providers that help us run the business, and only as needed for the purposes above:

• Guesty — reservation and property management.
• Stripe — payment processing.
• Google (Analytics, Ads, Tag Manager), Meta (Facebook and Instagram advertising, WhatsApp, Messenger) and OpenAI (ChatGPT advertising) — website analytics and advertising measurement. When you complete a booking we tell these platforms that a booking happened; for Meta and OpenAI this can include your email, phone and name in scrambled, irreversible form (hashed) so they can match it to an ad you saw, without receiving the readable data.
• Anthropic — our AI chat assistant (section 4).
• Twilio and our email provider (IONOS) — sending text, WhatsApp and email messages.
• The owner of the property you book, our staff, and authorities when the law requires it.

Our chat inbox and our email-newsletter system run on our own servers. We do not sell your personal information.

Several of these providers are located in the United States or other countries, so your information may be transferred outside Mexico. These transfers are necessary to provide our services.

6. How long we keep it

We keep your information for as long as needed for your stay and customer service, and booking and payment records for as long as Mexican tax and commercial law requires (generally five years). Website logs are kept for a limited time.

7. Cookies and similar technologies

We use cookies and similar technologies from Google (Analytics, Ads, Tag Manager), Meta and OpenAI to understand how the site is used and to measure our ads, plus the cookies needed for chat and payments to work. You can block or delete cookies in your browser settings, and manage personalized ads in your Google ad settings and Meta ad preferences. Booking works without advertising cookies.

8. Security

The site uses encrypted connections (HTTPS), payment card data is handled by Stripe under the PCI-DSS standard, and access to guest information is limited to the people who need it to serve you.

9. Your rights

You can ask us to access, correct or delete your personal information, object to its use (in Mexico these are known as ARCO rights), withdraw your consent, or stop the uses listed under "Other uses". Email reservations@mardecortezrentals.com with your name, what you are asking for and a way to confirm your identity. We will answer within the time limits set by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. Some information may need to be kept to meet legal obligations.

10. Minors

Our services are intended for adults. Reservations must be made by a person 18 or older.

11. Changes

If we change this policy, we will publish the new version on this page with a new "last updated" date.