Privacy Policy

1. Introduction

Lucha Mexico Experience (“we,” “us,” or “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how personal information is collected, used, disclosed, and safeguarded when you visit luchamexicoexperience.com (the “Website”).

This Website is operated from Mexico and is intended for an international audience. By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies only to personal information collected directly through this Website.

All reservations, payments, customer profiles, reviews, and transactional communications completed through third-party platforms are governed exclusively by their own privacy policies, including but not limited to:

• Airbnb Experiences
• FareHarbor
• GetYourGuide

We do not control and are not responsible for the privacy practices, data handling, or security measures of these third-party platforms. Each platform acts as an independent data controller.

3. Personal Information We Collect Directly

We collect only the minimum personal data necessary to respond to inquiries submitted through our contact forms.

This may include:

• Full name
• Email address
• Preferred or tentative event date
• Message content voluntarily provided by the user

We do not collect payment information, identification documents, or sensitive personal data through this Website.

4. Information Collected Automatically

This Website uses Google Site Kit, which integrates services such as:

• Google Analytics
• Google Search Console
• PageSpeed Insights

These services may automatically collect technical and usage data, including IP address (anonymized where applicable), browser type, device information, pages visited, time spent on the Website, referring URLs, and general geographic location.

This information is used solely for analytics, performance monitoring, and search visibility optimization. Google processes this data under its own privacy policies.

5. Purposes of Processing

Personal data is processed only for legitimate and limited purposes, including:

• Responding to inquiries and service requests
• Providing information about our experiences
• Communicating logistical details when requested
• Improving Website performance and usability
• Complying with legal and regulatory obligations

We do not sell, rent, or commercially exploit personal data.

6. Legal Bases for Processing

Depending on the applicable jurisdiction, processing is based on one or more of the following:

• User consent
• Performance of pre-contractual steps requested by the user
• Legitimate interests related to communication and service improvement
• Compliance with legal obligations

7. Third-Party Booking Platforms

When users book through Airbnb Experiences, FareHarbor, or GetYourGuide, those platforms are solely responsible for the collection, processing, storage, and protection of personal data related to bookings and payments.

Privacy rights related to booking data must be exercised directly with the respective platform.

8. International Data Transfers

As an international tourism service, personal data may be processed or stored outside the user’s country of residence, including in Mexico and the United States.

Appropriate safeguards such as adequacy decisions, standard contractual clauses, or platform-level compliance mechanisms are relied upon where required.

9. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations. When no longer required, data is securely deleted or anonymized.

10. Data Security

We implement reasonable administrative, technical, and organizational measures to protect personal data. However, no internet transmission or storage system is completely secure, and absolute security cannot be guaranteed.

11. Children’s Privacy

This Website is not directed at children under the age of 13. We do not knowingly collect personal data from minors without parental consent.

12. Cookies

This Website may use cookies or similar technologies through third-party analytics tools. Users may control cookies through browser settings. Disabling cookies may affect Website functionality.

13. Mexico – ARCO Rights (LFPDPPP)

In accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, users may exercise their rights to Access, Rectify, Cancel, or Object to the processing of their personal data.

Requests may be submitted to:
alexis@luchamexicoexperience.com

14. European Union, United Kingdom, Switzerland – GDPR

For users located in the EEA, UK, or Switzerland:

• Data controller: Lucha Mexico Experience (Mexico)
• We do not appoint a Data Protection Officer, as we are not legally required to do so
• We do not process special categories of personal data
• We do not engage in automated decision-making or profiling with legal or significant effects

Data subject rights include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Complaints may be lodged with the appropriate supervisory authority.

15. California – CCPA / CPRA

California residents have the right to know, access, correct, delete, and receive a copy of their personal information, and to not be discriminated against for exercising privacy rights.

We do not sell or share personal information and do not engage in targeted advertising.

Requests may be submitted to:
alexis@luchamexicoexperience.com

16. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Florida, and Oregon have the right to:

• Confirm whether personal data is processed
• Access personal data
• Obtain a copy of personal data
• Opt out of sale or targeted advertising
• Appeal denied requests where applicable

We do not sell personal data, engage in targeted advertising, or conduct qualifying profiling.

Requests and appeals may be submitted to:
alexis@luchamexicoexperience.com

17. Unified U.S. State Privacy Rights Summary

Rights recognized across applicable U.S. state laws include access, correction (where applicable), deletion (where applicable), portability, opt-out of sale or targeted advertising, and non-discrimination.

Because our Website collects only limited inquiry data and does not engage in advertising or data sales, many opt-out rights are not operationally triggered.

18. Authorized Agents

Where permitted by law, authorized agents may submit privacy requests on behalf of users, subject to verification of authority.

19. Updates to This Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted on this page with a revised “Last updated” date.

20. Contact Information

For questions, concerns, or requests related to this Privacy Policy or personal data processing, please contact:

Lucha Mexico Experience
Email: alexis@luchamexicoexperience.com