Privacy Policy
Last updated: April 1, 2026
1. Data Controller
Casa Schuck (“we,” “us,” or “our”), located at Garita 3, Centro, 37700 San Miguel de Allende, Gto., Mexico, is the data controller responsible for the collection, use, and protection of your personal data in accordance with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — LFPDPPP) and its regulations.
Contact: CasaSchuck@gmail.com
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identification data: full name, nationality, date of birth
- Contact data: email address, phone number, WhatsApp number, mailing address
- Booking data: check-in/check-out dates, room preferences, number of guests, special requests
- Payment data: processed exclusively through our third-party booking platform (Cloudbeds) — we do not store credit card numbers on our servers
- Communication data: messages sent via our website forms, WhatsApp, or email
- Technical data: IP address, browser type, device information, pages visited, collected via cookies and analytics tools
3. Purposes of Data Processing
Primary purposes (necessary for the service):
- Processing and managing your hotel reservation
- Communicating with you regarding your stay, services, and inquiries
- Processing payments through Cloudbeds
- Complying with legal and regulatory obligations
Secondary purposes (with your consent):
- Sending promotional communications about offers, events, and services
- Conducting satisfaction surveys
- Analytics and website improvement
- Retargeting through Meta Pixel for advertising purposes
You may opt out of secondary purposes at any time by contacting us at CasaSchuck@gmail.com.
4. Cookies & Tracking Technologies
Our website uses the following cookies and tracking technologies:
- Essential cookies: required for basic website functionality (session management, language preferences)
- Google Analytics 4 (GA4): collects anonymized usage data to help us understand how visitors interact with our site. Data is processed by Google LLC.
- Meta Pixel: tracks conversions and enables retargeting advertisements on Facebook and Instagram. Data is processed by Meta Platforms, Inc.
You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.
5. Data Sharing & Third Parties
We may share your personal data with the following third parties:
- Cloudbeds: our property management and booking platform, for reservation processing and payment handling
- WhatsApp (Meta): when you initiate communication through WhatsApp, your messages and contact information are processed by Meta Platforms
- Google LLC: for analytics purposes through GA4
- Meta Platforms, Inc.: for advertising and conversion tracking through Meta Pixel
- Government authorities: when required by law (e.g., guest registration as required by Mexican immigration regulations)
We do not sell your personal data to third parties.
6. International Data Transfers
Some of the third-party services we use (Google, Meta, Cloudbeds) are based in the United States. By using our website and services, you consent to the transfer of your data to countries outside of Mexico. These transfers are conducted with appropriate safeguards in accordance with the LFPDPPP.
7. Your Rights (ARCO Rights)
Under the LFPDPPP, you have the right to:
- Access your personal data held by us
- Rectify inaccurate or incomplete data
- Cancel (delete) your data when it is no longer necessary
- Object to the processing of your data for specific purposes
To exercise your ARCO rights, send a request to CasaSchuck@gmail.com with the subject line “ARCO Rights Request.” We will respond within 20 business days as required by law.
8. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at CasaSchuck@gmail.com.
9. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Booking and financial records are retained for a minimum of 5 years as required by Mexican tax law. Marketing data is retained until you withdraw your consent.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption. Payment processing is handled entirely by Cloudbeds, which maintains PCI DSS compliance.
11. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Contact Us
Casa Schuck
Garita 3, Centro
37700 San Miguel de Allende, Gto., Mexico
CasaSchuck@gmail.com