1. Data Controller

Haven Resorts, a company incorporated under the laws of the United Mexican States, with registered address in Cancun – Riviera Maya, Mexico, is responsible for the processing of personal data collected through the website www.havenresorts.com (the “Website”).

This Privacy Policy applies to users located in Mexico and in any other country from which the Website is accessed.

Privacy contact: info@havenresorts.com

 

2. Personal data we collect

We may collect the following personal data, either directly from you or automatically through your use of the Website:

a) Identification and contact data

  • Full name
  • Email address
  • Phone number
  • Country of residence

b) Reservation-related data

  • Stay dates
  • Accommodation preferences
  • Special requests
  • Reservation history

c) Technical and browsing data

  • IP address
  • Approximate location
  • Device and browser type
  • Pages visited and interactions

d) Marketing data (with prior consent)

  • Communication preferences
  • Interaction with promotional campaigns

We do not intentionally collect sensitive personal data, unless voluntarily provided by the data subject and strictly necessary for service delivery.

 

3. Purposes of data processing

Primary purposes (necessary)

  • Managing reservations and inquiries
  • Providing contracted hotel services
  • Customer service and support
  • Compliance with legal, tax, and administrative obligations

Secondary purposes (optional)

  • Sending promotional and marketing communications
  • Personalizing content and advertising
  • Statistical analysis and website improvement

You may object to or withdraw your consent for secondary purposes at any time.

 

4. Legal basis for processing

We process personal data based on one or more of the following legal grounds:

  • The data subject’s consent
  • The performance of a contract or pre-contractual relationship
  • Compliance with legal obligations
  • Legitimate interest, where applicable and provided it does not override the data subject’s rights

 

5. Cookies and similar technologies

We use our own and third-party cookies to:

  • Ensure proper functioning of the Website
  • Analyze traffic and user behavior
  • Display personalized content and advertising

Users may accept, reject, or configure cookies through the cookie banner or browser settings.

 

6. National and international data transfers

Personal data may be shared with:

  • Technology and IT service providers
  • Booking and payment platforms
  • Analytics, marketing, and advertising providers

Some of these providers may be located outside of Mexico, including in the United States, Canada, and the European Union.

In all cases, Haven Resorts ensures that such transfers are carried out under appropriate contractual, technical, and organizational safeguards, in compliance with applicable data protection laws.

 

7. Data retention

Personal data will be retained only for as long as necessary to fulfill the purposes described herein and to comply with applicable legal obligations. Once no longer needed, data will be securely deleted or anonymized.

 

8. Data subject rights

Depending on your jurisdiction, you may exercise the following rights:

  • Access to your personal data
  • Rectification of inaccurate or incomplete data
  • Cancellation or deletion (right to be forgotten)
  • Objection to or restriction of processing
  • Data portability (where applicable)
  • Withdrawal of consent at any time

To exercise these rights, please submit a request to:
info@havenresorts.com

 

9. Sale of personal data

Haven Resorts does not sell personal data of its users.

 

10. Security measures

We implement reasonable administrative, technical, and physical security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

 

11. Third-party links

The Website may contain links to third-party websites. Haven Resorts is not responsible for the privacy practices or content of such external sites. Users are encouraged to review their respective privacy policies.

 

12. Changes to this Privacy Policy

This Privacy Policy may be updated at any time. Any changes will be posted on the Website and, where required by applicable law, users will be notified accordingly.

 

13. Acceptance

By using the Website, you acknowledge that you have read and accepted this Privacy Policy.