Legal
Privacy
notice.
How we collect, use and protect your personal data.
Last updated: November 2026. This notice is a draft prepared for review by the hotel's legal counsel.
1. Data controller
Casa de la Aduana Hotel Boutique, with address at Lázaro Cárdenas, Centro, Topolobampo, Sinaloa, México, is responsible for the processing of the personal data collected through this website. Contact: hola@casadelaaduana.com.
2. What data we collect
- Identification and contact data: name, email, telephone, city of origin.
- Reservation data: dates, number of guests, room or package of interest, preferences and special requests.
- Event data: type of event, date, number of guests, budget and message.
- Technical data: IP address, browser, device, pages visited and interactions, when you accept analytics cookies.
We do not collect sensitive personal data. Please do not send health, financial or any other sensitive information through the contact forms.
3. Purposes
- Respond to information requests and quotes.
- Manage reservations, payments, check-in and guest services.
- Coordinate experiences with local operators.
- Send service messages related to your stay.
- Improve the website and measure the performance of our marketing, with your consent.
- Comply with legal and tax obligations.
4. Legal basis
The processing is based on your consent, the performance of the contract or pre-contractual relationship, and the legitimate interest of the hotel in improving its services. You can withdraw your consent at any time without affecting the services already provided.
5. Transfers and processors
We use third-party providers to operate the site and the reservation process, including hosting, email, Cloudbeds as booking engine, and Google Analytics 4 for statistics. These providers may process data outside Mexico under their own privacy policies. We do not sell or rent your personal data.
6. Retention
We keep reservation and billing data for the period required by tax and accounting regulations. Contact and event messages are kept for up to 24 months or until you request deletion, unless there is an ongoing relationship.
7. Your rights
You have the right to access, rectify, cancel or oppose the processing of your personal data (ARCO rights), as well as to limit its use or disclosure. To exercise them, write to hola@casadelaaduana.com with your name, the right you wish to exercise and a means of contact. We will respond within the legal term.
8. Cookies and analytics
We use essential cookies for the operation of the site and, only if you accept, Google Analytics 4 cookies to understand how visitors use the site. You can reject analytics cookies from the notice shown on your first visit or delete them from your browser. The site works without them.
9. Security
We apply reasonable administrative, technical and physical measures to protect personal data. No internet transmission is completely secure; if you detect a vulnerability or incident, please contact us immediately.
10. Changes
We may update this notice to reflect changes in our operations or applicable law. The current version will always be published on this page.