PRIVACY NOTICE — ESTANCIAS DM

This is a courtesy translation; the Spanish version prevails.

1. Data controller. Jorge Alfonso Díaz Mandujano, operating as Estancias DM, Río Suchiapa 335, Colonia 24 de Junio, Tuxtla Gutiérrez, Chiapas, Mexico. Contact: jorge@diazmandujano.mx or WhatsApp +52 961 128 8060.

2. Data we collect. Name, date of birth, nationality, e-signature; ID type, number, expiry and a photo of your official ID (passport) and a selfie holding it; email, mobile phone and address; names and dates of birth of companions; booking details and messages; cardholder name, last card digits and payment/deposit status. We do not collect sensitive data. Full card data is received and stored by our payment processor (Stripe or PayPal), not by us.

3. Purposes. Necessary: manage and charge your booking and security deposit; verify your identity and that it matches the cardholder; control access to the property; send arrival instructions and access code; handle complaints and chargebacks; charge damages or penalties under the Terms; issue invoices and meet legal obligations. Optional: promotions and satisfaction surveys (opt out by emailing "No promotions").

4. Transfers. Only as permitted by law: payment processors and issuing banks; the property insurer for claims; and authorities when legally required. Service providers acting on our behalf (Smoobu, email and storage) are not transfers. We never sell your data.

5. Retention. Your stay record (identification data, ID photo and verification selfie, signature, companions and acceptance of the Terms) is kept for 5 years after check-out, blocked, to evidence before administrative, prosecutorial or judicial authorities who occupied the property and for the Host's legal defense. It is accessed only to answer an authority request, a claim or a proceeding, and then deleted. Other data is kept for the periods required by tax and commercial law.

6. Your rights. You may access, rectify, cancel or object to the processing of your data, and revoke consent, by emailing jorge@diazmandujano.mx with your name, a copy of your ID, the right you wish to exercise and your booking number. We respond within 20 business days. You may also contact the Mexican data protection authority (Secretaría Anticorrupción y Buen Gobierno).

7. Cookies and changes. This site uses cookies necessary for operation and payments. Changes to this notice will be published here. Last updated: November 10, 2026.