Privacy Notice

1. Who is responsible for your data

Rancho Montalbeña INC, doing business as Vista Paraíso (“Vista Paraíso”), Mexican tax ID (RFC) RMI1202031Z1, with registered address at Carretera Punta de Mita 9, Higuera Blanca, Bahía de Banderas, Nayarit, C.P. 63734, is responsible for the personal data you provide to us. Our ranch is located at Rancho Vista Paraíso, Higuera Blanca, Bahía de Banderas, Nayarit, C.P. 63734, México.

For any privacy matter: info@vistaparaiso.mx · Phone 329 298 4008.

2. What personal data we process

When you book on this site: first and last name, email, phone or WhatsApp, nationality, the hotel or place where you are staying, the tour, date, time, number of people, and any notes you choose to write.

When you pay online: payments are processed by PayPal. We do not receive or store your card numbers or account credentials; we only receive the payment confirmation, with its transaction number and amount.

When you use the virtual assistant (chat): the messages you write.

When you browse the site: the data collected by the cookies and technologies described in section 7.

During your activity: we may take photos and video in which you appear, to offer them to you for sale. Your image is personal data.

Sensitive data. We do not ask for sensitive data on this site. Please do not write health information in the notes field. If, for your safety, we need to know about a health condition before an activity, we will ask you at the ranch and request your express written consent.

3. Why we use your data

Necessary purposes — essential to provide the service you booked, so they do not require your consent:

• Recording, confirming and managing your booking.
• Contacting you about your tour: pickup point and time, weather changes, rescheduling and cancellations.
• Charging, processing refunds and, if you request it, issuing your invoice.
• Answering your questions, including those asked in the chat.
• Complying with legal, tax and tourism-safety obligations.

Voluntary purposes — require your consent, and you may refuse without affecting your booking:

• Asking for your feedback on the service.
• Using photos or video in which you appear on our social media or advertising.
• Measuring site visits to improve it (only if you accept it in the cookie notice).

If you do not want us to use your data for any voluntary purpose, write to info@vistaparaiso.mxat any time. For analytics, just choose so in “Cookie settings” at the bottom of every page.

4. Who we share your data with

We do not sell your data. To provide the service, some providers process it on our behalf and only for what we ask of them:

• PayPal — processes online payments.
• Resend (United States) — sends your booking confirmation email.
• Anthropic(United States) — generates the virtual assistant’s replies from the messages you write in the chat.
• Vercel and Neon (United States) — host this site and the bookings database.
• Google— serves the site’s fonts and, only if you accept it, measures visits (Google Analytics).
• TripAdvisor — only if you accept it, shows our reviews here.
• WhatsApp (Meta) — when you choose to contact us that way.

Some of these providers are located outside Mexico. We will also share your data with authorities when required by law or court order.

5. Your rights and how to exercise them

You may access your data, correct it if inaccurate, delete it, and object to its use for specific purposes. You may also withdraw any consent you gave us and limit the use or disclosure of your data.

Send your request to info@vistaparaiso.mx including:

• Your name and an email or other way to reply to you.
• A copy of an official ID (or, if acting through a representative, proof of representation).
• A clear description of the right you wish to exercise and the data involved; for a correction, state what should be changed and, if possible, attach supporting documents.
• Your booking code (VP-XXXXXX), if you have it.

We will reply within 20 days of receiving your request and, if it is granted, carry it out within the following 15 days. These periods may be extended once for an equal period when justified; we will let you know.

6. How long we keep your data

Booking data is kept for as long as our relationship lasts and then for the periods required by tax and commercial law. We do not store chat conversations: each message is sent to the assistant provider to generate a reply, which handles it under its own policies. Once the retention period ends, the data is deleted.

7. Cookies and tracking technologies

This site uses cookies and similar technologies. When you arrive we show you a notice so you can decide; optional items are not loaded until you accept them.

• Necessary — NEXT_LOCALE remembers your language and is deleted when you close the browser; your cookie choice is stored in your own browser; PayPal uses its own cookies at the payment step to process it and prevent fraud.
• Analytics (optional) — Google Analytics records which pages are visited, from what kind of device and region, in aggregate.
• Third-party content (optional) — the TripAdvisor reviews widget, loaded from their servers, which may use its own cookies.

The site’s fonts are downloaded from Google’s servers, which receive your device’s IP address; they do not use cookies.

You can change your choice at any time in “Cookie settings” at the bottom of every page, and you can also block or delete cookies in your browser settings.

8. Minors

Bookings are made by an adult. If minors are part of your group, you provide the data needed for the booking as their parent or guardian.

9. How we protect your data

We apply administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing. The site uses an encrypted connection (HTTPS).

10. Changes to this notice

Any change will be published on this page, with its update date shown above.

11. Authority

If you believe your right to personal data protection has been violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the competent authority.

This English version is provided for convenience; in case of discrepancy, the Spanish version prevails.