Last updated: August 10, 2026
This policy explains how Absolute Adventure Mexico handles personal information when you browse this website, ask a question, make a booking, or use our services. It applies worldwide and includes additional information about rights that may apply in the United Kingdom, Canada, California, and other United States jurisdictions.
1. Who is responsible and how to contact us
Absolute Adventure Mexico
C. 12 Nte Bis 94, Calica, Gonzalo Guerrero, 77710 Playa del Carmen, Quintana Roo, Mexico
Phone: +52 984 806 7432
Email: contact@absolute-adventure-mexico.com
Chris Peller is the contact responsible for Canadian privacy enquiries and can be reached using the same email address.
2. Information we handle
- Questions, bookings, and orders: name, contact details, language, selected tour, date, number of guests, hotel or pickup location, special requests, and messages.
- Transactions: service, amount, currency, payment method, status, and payment reference. Complete card details are handled by the payment provider you choose and are not stored by this website.
- Accounts, forms, and support: information you enter in an account, form, email, or optional chat.
- Security and operation: IP address, date and time, URL, browser, device, error logs, and anti-abuse signals needed to keep the service available and prevent fraud.
- Limited cookieless Google measurement: while consent is denied, the consent state, page and request metadata, timestamp, user agent, referrer, whether an advertising click parameter is present, and a random number generated for the page request may be transmitted without setting analytics or advertising cookies.
- Full analytics and advertising: only after you allow them, pages and events, pseudonymous identifiers, campaign or click information, approximate location, and browser or device characteristics.
3. Why we use information
- To answer an enquiry, provide a quote, and manage a booking, payment, and tour: steps requested before a contract and performance of the contract.
- For invoices, accounts, tax, legal requests, and required records: legal obligations.
- For security, fraud prevention, service continuity, legal claims, and non-intrusive service improvement: legitimate interests balanced against individual rights.
- For limited cookieless Google measurement while consent is denied: our legitimate interest in aggregate site and campaign measurement, where applicable law permits, balanced against individual rights. It is disabled when Global Privacy Control or Do Not Track is detected.
- For full analytics, advertising, chat, and external content: consent. Browser storage and non-Google optional services stay disabled until you allow them.
- For promotional email or text messages: consent where required, or an applicable existing-business-relationship exception. Promotional messages must provide an unsubscribe method.
4. Providers and recipients
Access is limited to people and providers who need information to supply or protect the service. Depending on your action and choices, these may include:
- Hosting and security: Kinsta and Cloudflare.
- Shop and bookings: WordPress, WooCommerce, and WooCommerce Bookings in our hosting environment.
- Transactional email: Postmark.
- Payments: the bank or provider displayed and chosen during checkout, including Stripe when offered.
- Optional support: Crisp, only when you allow chat.
- Measurement and advertising: our Stape/Google Tag Manager gateway loads Google tags with all four Consent Mode storage and advertising signals denied. Google may then receive limited cookieless measurements. Full Google Analytics and Google Ads storage, Microsoft Advertising, and Pinterest activate only after consent. See the policies of Google, Microsoft, Pinterest, and Stape.
- Optional external content: YouTube, Google Maps, and social or review platforms, only when you allow their content.
We do not sell personal information for money. Allowing advertising tags may nevertheless be considered “sharing,” targeted advertising, or a sale under some United States privacy laws.
5. International transfers
Absolute Adventure Mexico is established in Mexico. Providers may operate in the United States, Canada, the European Economic Area, the United Kingdom, or elsewhere. When required, transfers rely on an adequacy decision, appropriate contractual safeguards, a recognised transfer framework, or an applicable exception, and are limited to the information needed.
6. Retention
We keep information only as long as needed for its purpose, then delete or anonymise it, subject to tax, accounting, contractual, security, limitation-period, and other legal requirements. Enquiries without a booking are reviewed regularly. Booking and payment records are kept for applicable legal periods. Typical browser-storage periods are listed in our Cookie and Optional Services Policy.
7. Your rights
Depending on the law that applies, you may request access, a copy, correction, deletion, restriction, or portability; object to some processing; withdraw consent; and exercise your rights without unlawful discrimination. We may request reasonable information to verify identity. Rights are not hidden based on IP location: all visitors can use our Your Privacy Choices page.
- United Kingdom: UK GDPR rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may complain to the UK Information Commissioner’s Office.
- Canada: you may request access or correction, withdraw consent where permitted, and complain to the applicable federal or provincial privacy authority. Commercial electronic messages sent to Canada are handled under applicable CASL requirements.
- California and other United States states: where a law covers our business and the processing, rights may include access, correction, deletion, a portable copy, and opting out of sale, sharing, or targeted advertising. A recognised Global Privacy Control signal is treated as an opt-out for optional analytics and advertising.
Send a request to contact@absolute-adventure-mexico.com. If an applicable US state law gives you an appeal right and we deny a request, reply to our decision and state that you are appealing.
8. Cookies, consent, and browser signals
We use one conservative worldwide rule: non-essential browser services do not load before consent. Accept and Reject are equally available. Change or withdraw your choice at any time:
The choice is stored for 180 days in a secure cookie limited to this hostname. It is not shared with another language site. We do not create a central consent database linked to a full IP address. Global Privacy Control and Do Not Track block the Google/Stape loader and all optional analytics and advertising.
9. Security, children, and automated decisions
We use proportionate technical and organisational safeguards, but no online service can promise absolute security. Our tours are purchased by adults; we do not intentionally collect children’s information for behavioural advertising. We do not make decisions producing legal or similarly significant effects solely through automated profiling.
10. Changes
We update this policy when services, providers, or obligations change. A material change to optional purposes causes a renewed consent request. Please also read our Terms & Conditions, Cookie Policy, and Legal Notice.