Privacy Notice
In "Mar y Cielo" (operated by CASACANTA ZIHUA S.A. de C.V.) we are aware of the importance of maintaining the confidentiality of personal and sensitive information of our guests and clients. We are committed to protecting your information and privacy in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (Mexico), the General Data Protection Regulation (GDPR) of the European Union, and the California Consumer Privacy Act (CCPA) in the United States. Below, we provide important information regarding the collection and use of personal data.
1. Data Collection
We may collect personal information at any of the contact and interaction points we have with our clients, including:
- Our website, reservation system, and online forms
- Information sent or shared through our social media channels
- Direct interactions at the restaurant or resort
This information may include:
Contact details (name, address, email, phone number); reservation or stay details; information related to product or service purchases; nationality; passport or ID number, place and date of issue; history of previous stays; payment and tax information (including RFC or TAX ID); stay preferences; marketing and communication preferences; feedback or opinions; information about travel companions; and medical information you choose to share to enhance your stay.
2. Use of Personal and Sensitive Information
We use your personal data to:
- Provide the requested services
- Improve our services and guest experience
- Ensure our website and services meet your needs
- Process payments, refunds, and inquiries
- Communicate promotions and service updates
3. Data Transfers
We may transfer your data to:
- Medical professionals in case of emergency
- Third-party providers operating our IT infrastructure
- Government or regulatory authorities when legally required
If you do not object to these transfers, we will assume your consent.
4. Data Security
CASACANTA ZIHUA S.A. de C.V. has implemented physical, technical, and administrative measures to protect your data against unauthorized access, alteration, or loss. Our systems use SSL encryption, access controls, and secure backups.
5. ARCO Rights, GDPR and CCPA
You have the right to:
- Access your personal data
- Request correction of incorrect or outdated data
- Cancel or request deletion of your data when applicable
- Object to the processing of your data
- Request data portability when applicable
- Revoke your consent at any time
You may exercise these rights by sending your request to:
sales.reservations@lacasaquecanta.com
+52 (755) 555 7030
We will respond within the periods established by applicable law. If your request is valid, it will be fulfilled according to the applicable legal requirements.
6. Modifications
This Privacy Notice may be updated at any time. Changes will be published at:
Last updated: July 2026
7. Data Controller Identity and Address
CASACANTA ZIHUA S.A. de C.V.
Fiscal address: Montes Urales 720, Floor 1, Office 1-A, Lomas de Chapultepec I Seccion,
Miguel Hidalgo, 11000, CDMX, Mexico
Restaurant and resort address: Camino Escenico Playa La Ropa S / N, La Ropa Beach,
40880 Zihuatanejo, Guerrero, Mexico