Privacy Policy

Privacy Notice (Mexico)

MIRI ADVENTURES (the “Controller”), with address at Street Mujica between Miguel Hidalgo and 3rd street, Quintana Roo, Mexico is responsible for processing personal data under Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, the Privacy Notice Guidelines, and other applicable provisions.

1) Personal data we process

We may process: identification and contact details, billing and payment information, website and platform usage data, and, where applicable, communications and support records. We do not routinely request sensitive data. If needed due to the nature of the service, we will request explicit consent and apply enhanced safeguards.

2) Purposes of processing

Primary purposes (necessary): service delivery, customer and vendor management, invoicing and collections, technical support and customer service, legal compliance, website administration and security.

Secondary purposes (optional): marketing, advertising, business prospecting, satisfaction surveys, news or promotional messages. You may object to secondary purposes at any time without affecting primary services.

3) Legal basis and consent

We process data in accordance with the principles of lawfulness, consent, information, quality, purpose, fairness, proportionality, and accountability. For secondary purposes and, where applicable, sensitive data, we will obtain your consent.

4) National and international transfers

We may transfer data to:

Service providers acting as processors to deliver services (hosting, payments, messaging, analytics, etc.), under our instructions and with confidentiality and security measures.

Competent authorities when legally required.

Providers located in other countries. In such cases, we ensure appropriate contractual and security measures and, where applicable, obtain your consent.

5) Cookies and tracking technologies

We use cookies and similar technologies to enhance experience, analyze usage, and, where applicable, for marketing purposes. You can disable them in your browser settings. See our website cookie policy for details.

6) Retention periods

We retain data for as long as necessary to fulfill the stated purposes and legal, tax, or contractual requirements. Once fulfilled, data will be securely deleted or anonymized.

7) Security measures

We implement administrative, technical, and physical safeguards to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

8) Security breaches

If a breach significantly affects the moral or property rights of data subjects, we will promptly notify impacted individuals, indicating the nature of the incident, compromised data, recommendations, and corrective actions.

9) Minors and sensitive data

We do not knowingly collect data from minors without consent from parents or guardians. Processing of sensitive data will be limited and subject to explicit consent.

10) ARCO rights and how to exercise them

You may exercise your rights of Access, Rectification, Cancellation, and Objection, revoke consent, and limit the use or disclosure of your data by sending a request to hello@miriadventures.com or to the address provided. We will respond within 20 days and, where appropriate, fulfill the request within 15 days, pursuant to the LFPDPPP.

11) Changes to this Privacy Notice

We may update this Notice to reflect regulatory or business changes. Updates will be communicated on our website and will take effect upon publication.