Last updated: October 3, 2026
This Privacy Notice is issued in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”). In case of any discrepancy, the Spanish version shall prevail.
1. Data controller
César Ulises Bautista Portilla, an individual doing business as Odyssey Adventure MX (“Odyssey”), with address at Kab 128, Balamtun, 77710 Playa del Carmen, Quintana Roo, Mexico, is responsible for the processing of your personal data.
For any matter related to this notice or your personal data, contact us at hola@odysseyadventuremx.com.
2. Personal data we collect
We collect data you give us directly (website forms, Meta lead forms on Facebook and Instagram, WhatsApp, email, live chat or in person) and data collected automatically when you browse our website. Depending on the service you request, this may include:
- Identification and contact: full name, email, phone or WhatsApp number, country and city of residence.
- Trip planning data: date of birth, nationality, passport or ID number and expiry date, travel dates and preferences, number of companions, and an emergency contact.
- Tax data: tax ID and billing details, only if you request an invoice.
- Payment data: card payments are processed directly by our payment platforms (Stripe, Mercado Pago and Clip). Odyssey does not store your full card number. If you pay by bank transfer, we keep the receipt and transaction details to reconcile your payment.
- Browsing data: IP address, device and browser type, pages visited and ad interactions, collected through cookies and similar technologies (see section 9).
If you provide data about third parties (travel companions or emergency contacts), you confirm you have their consent. Data of minors is processed only with the consent of a parent or legal guardian.
3. Sensitive personal data
To keep you safe during sports, mountain, diving, hiking and other experiences, we may ask for health information: relevant medical conditions, allergies, dietary restrictions, medications we should be aware of, and fitness level. It may also be needed to purchase travel insurance on your behalf.
This is sensitive data. We will only process it with your express written consent, requested through a consent checkbox or signature on the relevant form. It will be used solely for the purposes described here and shared only when essential for your safety.
4. Purposes of processing
Primary purposes (required to provide the service you request):
- Answering your inquiries and preparing personalized quotes.
- Designing, booking and confirming your experiences, expeditions, lodging and transportation with our suppliers.
- Managing deposits, payments, refunds and invoicing.
- Communicating with you before, during and after your trip (Remote Concierge service).
- Handling emergencies, arranging travel insurance and protecting your safety during activities.
- Complying with legal and tax obligations and requests from competent authorities.
- Handling complaints and following up on service quality.
Secondary purposes (not required for the service, but help us serve you better):
- Sending you information about new expeditions, offers, newsletters and travel content.
- Conducting satisfaction surveys and market research.
- Showing you personalized advertising on platforms such as Facebook, Instagram and Google.
- Publishing photos or videos taken during experiences on our website and social media, only with your authorization.
If you do not want your data used for secondary purposes, email hola@odysseyadventuremx.com at any time with the subject “Opt out of secondary purposes”. This will not affect the services you book with us.
5. Data transfers
To provide the services you request, we may share your data with the following third parties, in Mexico and abroad (including Guatemala and your other travel destinations):
- Hotels and lodging providers, to manage your reservations.
- Tour operators, local agencies and guides, to operate your experiences.
- Transportation companies (ground, air or sea), for your transfers.
- Insurance companies, to purchase travel or activity insurance on your behalf.
- Competent authorities, when legally required.
These transfers are necessary to fulfill our contractual relationship with you and therefore do not require your consent under the Law. Sensitive data will only be shared when essential for your safety and with your express consent.
We also use technology providers that process data on our behalf and under our instructions, without using it for their own purposes: Hostinger (web hosting and email), Stripe, Mercado Pago and Clip (payment processing), Meta Platforms (forms, WhatsApp and advertising tools), Google (web analytics, forms, spreadsheets and calendar), HubSpot (customer management and informational emails), artificial intelligence tool providers that help us organize and draft messages, and live chat providers. Some of them may store information outside Mexico.
6. Your ARCO rights: access, rectification, cancellation and opposition
You have the right to know what data we hold and how we use it (Access), to request corrections if it is inaccurate or incomplete (Rectification), to ask us to delete it from our records (Cancellation), and to object to its use for specific purposes (Opposition).
To exercise these rights, email hola@odysseyadventuremx.com including:
- Your full name and an email address or other means to send you our response.
- A copy of an official ID or, if applicable, documents proving legal representation.
- A clear description of the data and the right you wish to exercise.
- Any document that helps us locate your data.
We will respond within 20 business days of receiving your request. If your request is approved, it will take effect within the following 15 business days.
Data deletion: if you contacted us through a Facebook or Instagram form and want us to delete your information, simply email us at the address above with the subject “Delete my data”.
7. Withdrawal of consent
You may withdraw your consent at any time using the same procedure described in section 6. Please note that if the withdrawal affects data essential to a service in progress, we may be unable to continue providing it.
8. Limiting the use or disclosure of your data
You may ask to be added to our internal exclusion list to stop receiving promotional communications by emailing hola@odysseyadventuremx.com, or use the unsubscribe link included in every promotional email.
9. Cookies, pixels and tracking technologies
Our website uses cookies and similar technologies, such as Google Analytics and the Meta Pixel, to analyze site usage, measure the effectiveness of our campaigns and show you relevant ads. These collect data such as IP address, browser and device type, pages visited, time on site and actions taken on the site.
You can disable or delete cookies in your browser settings, and manage your ad preferences in your Facebook, Instagram or Google account settings. Some site features may not work properly if cookies are disabled.
10. Security and retention
We apply administrative, technical and physical safeguards to protect your data against damage, loss, alteration or unauthorized use. We keep your data only as long as needed for the purposes described and for applicable legal and tax obligations, after which it is securely deleted.
11. Changes to this notice
This notice may be updated due to legal changes or changes in our services or privacy practices. Any changes will be published on this page with the date of the latest update.
12. Competent authority
If you believe your right to personal data protection has been violated, you may contact the competent Mexican authority, currently the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance).
By providing your personal data, you acknowledge that you have read and understood this Privacy Notice.