Paradise Beachfront

Your data, plainly

Privacy Policy

This page is also our privacy notice ("aviso de privacidad") under Mexico's personal data protection law (LFPDPPP). Last updated: August 5, 2026

We keep this simple, because what we do with your data is simple: we use it to host you, plus basic statistics about how this website is used. We never sell or rent personal data, we run no advertising trackers, and we send no newsletters.

1 · Who is responsible for your data

The data controller is Inversión y Gestión Inmobiliaria SA de CV, RFC IGI170720II5, with address at Boulevard Kukulcán Km 9.5, Zona Hotelera, Salvia Condominium, Apto 304 AB, C.P. 77500, Cancún, Quintana Roo, México (the company that operates Paradise Beachfront). For anything in this policy, write to soporte@igisa-solutions.com.

2 · What data we collect

  • Booking details: name, email address, phone number, country, the dates and space you book, party size, and any special requests you send us. Collected through our booking system when you reserve.
  • Payment data: handled by our payment providers, Stripe, PayPal or Openpay, depending on the payment option used for your booking. Your card or account details go encrypted directly to the provider; we only ever receive a payment confirmation and, for cards, the last four digits, never the full number.
  • Identity verification: at check-in, building staff visually check the lead guest's government photo ID against the reservation name. We do not collect ID documents through this website.
  • Messages: the emails and WhatsApp messages we exchange with you, so we have the context of your stay at hand.
  • Technical data: standard, short-lived server logs (IP address, browser type, pages requested) kept for security and diagnostics, plus the cookies and website analytics described in section 5.

We do not collect sensitive personal data (health, beliefs, biometrics), and we don't knowingly collect data about children beyond the number of guests in your party.

3 · What we use it for

Purposes necessary for hosting you:

  • Managing and confirming your reservation, and charging the payment you authorize.
  • Communicating with you before, during and after your stay about that stay.
  • Coordinating check-in and building access: the condominium reception needs the lead guest's name and party size.
  • Complying with legal and tax obligations (for example issuing a CFDI invoice if you request one).
  • Preventing fraud, and handling payment disputes or claims.

One optional purpose: after your stay we may send you a single follow-up message asking how it went. You can ignore it or ask us to stop; that changes nothing about your booking or any future one.

4 · Who we share it with

Only what each of these needs, and only for the purposes above:

  • Beds24: the booking system that runs our reservations and checkout (based in the European Union).
  • Stripe: payment processing when you pay by card through Stripe (based in the United States and Ireland).
  • PayPal: payment processing when you choose to pay with PayPal (based in the United States).
  • Openpay: payment processing when you pay by card through Openpay (based in Mexico).
  • Google: website analytics only (Google Ireland Limited; data may be processed on Google servers in the United States). It receives the technical data in section 5, plus anonymous booking statistics — the room, number of nights, party size and amount being booked, and the booking's reference number once paid — never your name, email, phone or any payment detail.
  • Salvia Condominium reception: the lead guest's name and party size, for building access and your check-in.
  • Professional advisors and authorities: our accountants for tax compliance, and authorities when the law requires it.

Some of these recipients are outside Mexico; in every case the transfer is necessary to perform the contract between us: your booking. We make no transfers that require your separate consent under the LFPDPPP; if that ever changed, we would ask you first.

5 · Cookies, analytics and this website

  • A functional cookie, lang, which remembers your language choice for a year. No advertising cookies, ever.
  • Our own visit statistics: our server counts visits and how far people get in the booking form, so we can tell whether the site is working. It stores no name, no email and no IP address — only a random number, in two places: your browser's tab memory, which disappears when you close the tab, and one cookie of ours (av) that lets us tell that the same browser has come back before. Where the law requires asking (the EU and UK), that cookie is set only if you accept it in the consent notice on our booking page — declining changes nothing about how the site works; elsewhere it is set automatically, and you can remove it at any time by clearing cookies. It holds nothing but the random number, is never shared with anyone, and is read only by this site. These records, and the cookie, are deleted after at most 400 days. Clearing your cookies makes you a new visitor to us.
  • Google Analytics: we also use Google Analytics 4 (Google Ireland Limited) to see where visitors come from and which pages they read. Where the law requires asking (the EU and UK), it loads only after you accept the consent notice on our booking page. It does set cookies (_ga and _ga_…, lasting up to two years) and sends Google your shortened IP address, your device and browser, the pages you view, and the anonymous booking statistics described in section 4. We do not use it for advertising, remarketing or audience selling. You can opt out at any time: install Google's opt-out browser add-on, block cookies for this site, or use a browser that blocks trackers — nothing on this site stops working if you do. Google's own privacy policy is at policies.google.com/privacy.
  • Our pages load fonts and a styling library from public CDNs (Google Fonts, Tailwind), which receive your IP address when they serve those files, as any web server does.
  • When you book, checkout takes place either on this site or on the secure booking pages of our booking system (Beds24). The payment itself is always completed by the payment provider handling it (Stripe, PayPal or Openpay) on their own secure pages. Neither our own statistics nor Google Analytics runs on the pages where payment happens, and neither ever receives your name, email, phone or any payment detail.

6 · How long we keep it

Booking and billing records are kept for as long as Mexican tax and commercial law requires. Correspondence is kept while it is useful for looking after your stays. After that, data is deleted or anonymized. Server logs rotate on a short cycle. Our own visit statistics are deleted automatically after at most 400 days; Google Analytics data is kept for the period set on our Google Analytics property (Google's default is 14 months).

7 · Your rights (ARCO)

Under Mexican law you may, at any time, request Access to the data we hold about you, its Rectification if it's inaccurate, its Cancellation (deletion) when we no longer need to keep it, or Oppose its processing for specific purposes. You may also revoke consent you have given, and ask us to limit how we use your data.

To exercise any of these, email soporte@igisa-solutions.com with your name, the right you want to exercise, and enough detail to identify you as the data's owner (for example the email your booking was made with). We will respond within the timeframes the LFPDPPP sets (at most 20 business days). If you are not satisfied with our answer, you may complain to the Mexican data protection authority.

If you are visiting from the EU, UK or elsewhere: we honour the equivalent rights of your home framework (access, correction, erasure, objection and portability) through the same email address.

8 · How we protect it

All connections to this site and our checkout are encrypted (HTTPS). Payment data is handled exclusively by our payment providers (Stripe, PayPal, Openpay), which are PCI-DSS certified. Access to booking data is limited to the people who need it to host you, and we apply the administrative, technical and physical safeguards the LFPDPPP requires.

9 · Changes to this notice

If we change this policy we will publish the new version on this page with a new date at the top. A material change will also be flagged on the site. The version published here is always the one in force.

10 · Contact

Inversión y Gestión Inmobiliaria SA de CV · RFC IGI170720II5
Boulevard Kukulcán Km 9.5, Zona Hotelera, Salvia Condominium, Apto 304 AB,
C.P. 77500, Cancún, Quintana Roo, México
soporte@igisa-solutions.com · Customer support