NOVATEIRRA

Privacy notice

This Integral Privacy Notice is issued in compliance with articles 15 and 16 of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the guidelines issued by the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

1. Identity and address of the data controller

The data controller of your personal data is Saúl Fernando Covarrubias Pelcastre, a Mexican individual taxpayer (persona física con actividad empresarial) with tax ID (RFC) COPS000611HZA, doing business under the commercial name NOVATEIRRA, with fiscal address at Datililo M 22 L #28, Col. Ejido Cabo San Lucas, Migriño, Los Cabos, Baja California Sur, Mexico, C.P. 23450.

Contact for data protection matters: [email protected]

2. Personal data that we collect

We collect the personal data necessary to operate the Service. Depending on the interaction:

  • Identification data: full name, date of birth, official identification (when required for check-in).
  • Contact data: email, phone number, postal address.
  • Booking data: dates, number of guests, special requests, identification of additional guests invited by you.
  • Billing data: RFC (when invoicing is requested), tax address, payment method (handled and tokenised by Stripe; NOVATEIRRA does not store full card numbers).
  • Technical data: IP address, browser type, browsing logs, language and currency preferences, cookies and similar technologies.

We do not collect data considered sensitive under article 3 fraction VI of the LFPDPPP. If your stay requires us to handle sensitive data (e.g. accessibility needs), it will be requested explicitly and with separate written consent.

We treat your data for:

  • Creating and administering your user account.
  • Processing and confirming bookings.
  • Charging the price through Stripe and issuing the tax receipt (CFDI) when requested.
  • Sending operational communications about your booking (confirmation, modifications, cancellations, reminders).
  • Customer support.
  • Complying with tax, accounting and consumer protection obligations.
  • Preventing fraud and abuse of the platform.

If you do not oppose, we may also treat your data for:

  • Sending commercial communications, promotions and special offers.
  • Inviting you to surveys and product research.
  • Personalising content and recommendations.

You may oppose secondary purposes at any time by writing to [email protected] or by using the unsubscribe link included in every commercial email. Refusing secondary purposes does not affect the primary purposes or the Service.

5. Data transfers

NOVATEIRRA transfers personal data to the following third parties:

  • Stripe Payments Mexico, S. de R.L. de C.V. and its international affiliates, for payment processing. This transfer is required by the LFPDPPP (article 37, fractions I, II, V and VI) and does not require additional consent.
  • Email and SMS providers for sending operational communications.
  • Property owners and on-site managers, to coordinate check-in, only with the minimum data required for that purpose.
  • Tax, legal and accounting authorities, when required by law.

We do not sell, lease or transfer personal data for commercial purposes to third parties unrelated to the Service.

You may exercise your rights of Access, Rectification, Cancellation and Opposition (ARCO rights) as well as revoke your consent at any time by sending a written request to [email protected] that includes:

  • Full name and a means of contact.
  • Documents that prove your identity (official ID).
  • Clear and precise description of the right exercised and the data to which it refers.
  • Any element or document that facilitates the location of the data.

NOVATEIRRA will respond within a maximum of 20 business days from the receipt of the request, and will materialise the determination within the following 15 days. The exercise of these rights is free; only verifiable shipping or reproduction costs may be charged.

7. Mechanisms to limit use and disclosure

You may limit the use or disclosure of your data by:

  • Activating preferences in your account profile.
  • Writing to [email protected].
  • Unsubscribing from commercial emails using the link included in each message.

8. Cookies and similar technologies

The platform uses cookies and similar technologies for session, security, language/currency preferences and basic analytics. You can manage cookies from your browser. Some cookies are essential for the Service to function and cannot be disabled without affecting the experience.

9. INAI

If you consider that your right to the protection of personal data has been violated, you may file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) — www.inai.org.mx.

10. Changes to this notice

This notice may be updated to reflect legal, operational or commercial changes. Substantive changes will be notified through the platform and, when applicable, by email. The latest version is always available at /page/en/privacy.

Last updated: May 2026.

←