Privacy Policy

Last update: October 24th, 2026.

At Travel In Oaxaca, we value the trust you place in us when planning your most personal experiences. This policy explains what personal information we collect through https://travelinoaxaca.com and while designing your journey, why we collect it, who sees it, how long we keep it and the choices you have.

Who is responsible for your data

Travel In Oaxaca (“we”, “us”) is responsible for the personal information described in this policy. You can reach us at alex@travelinoaxaca.com.

Information we collect

Information you give us

• Inquiry form: arrival and departure dates, number of travelers, nationality, the focus of your journey, the experience you have always dreamed of, your name, email address, phone or WhatsApp number, your estimated budget range, and any other details you choose to add, such as dietary needs, special occasions or accessibility requirements.
• Newsletter sign-ups: your first name and email address.
• Conversations with us by email, WhatsApp, Instagram or phone, and the details needed to confirm a booking, such as traveler names and flight details for airport and hotel transfers.
• Payments: made by Revolut, PayPal or bank transfer. We do not collect or store card numbers on this website; those services handle your payment details under their own policies.

Sensitive information

Allergies, medical conditions or accessibility needs that you share are used only to keep you safe and comfortable, and are shared only with the providers who need them to look after you. Please share only what is necessary. By including this information, you consent to its use for that purpose.

Information collected automatically

This website sets no cookies of its own and uses no analytics service or advertising trackers. Our hosting and security provider processes technical data such as your IP address, browser type and the pages you request, in order to deliver the site and protect it from abuse. If we add an analytics tool in the future, we will update this policy first.

How we use your information

• To answer your inquiry and design your customized itinerary.
• To coordinate your journey with the providers involved and to manage bookings and payments.
• To keep you safe and to look after dietary, health and accessibility needs.
• To send you the newsletters you signed up for yourself, which you can leave at any time.
• To meet legal, tax and accounting obligations, and to keep this website secure.

We add your email address to a newsletter only if you signed up yourself through one of the newsletter forms on this website. If you gave us your email for an inquiry, a booking or travel arrangements, we use it only for that purpose and will never add it to a newsletter.

We do not sell your data, and we do not use it for mass marketing without your explicit consent.

Legal basis for visitors from the European Economic Area and the United Kingdom

Where the GDPR applies, we rely on: the steps needed to prepare or perform a contract with you; your consent (newsletters and sensitive information); our legitimate interest in answering you and keeping the website secure; and legal obligations.

Who we share your information with

• Providers needed for your journey, such as hotels, private transportation, artisans and chefs, only to the extent needed to carry out your trip.
• Services that process data on our behalf:
  • Web3Forms delivers the forms you submit to our email.
  • Google (Google Sheets and Apps Script) stores a copy of each inquiry so that none is lost.
  • WhatsApp and Instagram, both operated by Meta, carry the messages and files you send us there.
  • Our hosting and security provider delivers and protects the website.
  • Our email provider hosts our mailbox.
  • Revolut, PayPal and your bank process payments.
  • MailerLite delivers the newsletters you sign up for and keeps the subscriber list.
• Authorities, when the law requires it.

International transfers

Some of these providers may process data outside Mexico, including in the United States and the European Union. By submitting a form or booking with us, you understand that your information may be transferred to them for the purposes described here. We choose providers that protect personal information.

Confidentiality of Itineraries

We understand the sensitive nature of your travel plans. Your itineraries, accommodation locations, and logistical details are treated with the utmost discretion and are only shared with the service providers necessary (hotels, private transportation) for the execution of your trip.

Cookies, embedded content and links

This website sets no cookies of its own. Some Journal posts embed a Google Map; when it loads, Google may set its own cookies. Our pages also link to WhatsApp, Instagram and other sites, which have their own privacy policies.

How long we keep your information

• Inquiries that do not become a booking: up to 12 months, then they are deleted.
• Bookings and payment records: for as long as Mexican tax and accounting rules require, normally five years.
• Newsletter subscriptions: until you unsubscribe.

Your rights

You can ask to access, correct or delete your personal information, to object to how we use it, to withdraw a consent you have given, or to limit its use or disclosure. These are known in Mexico as the ARCO rights (access, rectification, cancellation and opposition). If the GDPR applies to you, you also have the right to data portability and to restrict processing.

To exercise any of them, write to alex@travelinoaxaca.com with your name, a way to reach you and what you are asking for. We will reply within 20 business days. If you are not satisfied with our answer, you may contact the data protection authority of your country, or in Mexico the authority responsible for personal data protection.

Data Security

We implement digital security measures to protect your information from unauthorized access. Your connection to our site is encrypted using SSL technology.

Children

This website is not directed at children. Travelers under 18 must be included in a booking by a parent or legal guardian.

Changes to this policy

When we change this policy, we will update the date at the top. Material changes will be notified to anyone who has an active booking with us.

Contact

Questions about this policy or about your information: alex@travelinoaxaca.com.