Privacy Notice

We keep this simple. The site counts visits with Google Analytics and measures our advertising, only as far as you allow: visitors in Europe are asked first, and anyone can change their answer below, under Cookies. It also remembers a few choices you make, in your own browser. When you write to us, book or stay, we use what you give us to look after you, and for nothing else. This notice says what we hold, why, who else handles it, and how you can see it, correct it or have it deleted.

Who is responsible for your data

Casa Etérea is two houses near San Miguel de Allende, in Guanajuato, Mexico. The party responsible for your personal data (in Mexican law, the responsable) is Casa Etérea. Its full legal name, its tax number (RFC) and its postal address for privacy matters will be added here shortly; until then, write to us at the address below.

For anything about your personal data, write to info@casaeterea.com. The house’s management handles these requests.

What we collect, and why

When you visit the site

The site is hosted by Cloudflare. Like any web host, Cloudflare receives what your browser sends with each request: your IP address, which shows roughly where you are, your browser and device, the page you asked for, and your language settings.

Before a page is sent, a small Cloudflare function chooses its language. It looks at the language your device prefers and, if you picked one with the EN/ES word at the foot of the page, at that choice. It decides, sends the page and keeps nothing. We keep no record of your visit. Cloudflare may keep short-lived logs of its own, for security, under its privacy policy.

Our fonts and images are served from this site, so no other company sees you load them.

Analytics and advertising

To learn how people find Casa Etérea and use the site, we use Google Analytics. It records the pages you see, how you arrived (a search, a link, an ad), roughly where you are, and your browser and device, under a random number kept in Google’s cookies. Google Analytics does not log or store your IP address. We see totals and trends, never who you are.

Advertising covers measuring our ads with Google Ads and Meta (Instagram and Facebook), and Google’s audience reports. Today the site carries Google’s tag alone; if we add Meta’s, it runs only for visitors who said yes to Advertising.

In Europe (the European Union, the European Economic Area, the United Kingdom and Switzerland) the site asks before any of this uses cookies. Until you answer, or if you decline, Google still receives signals without cookies: that a page was seen and how it was used (scrolling, for example), with the page’s address, your browser’s details and a temporary number that ties together the pages of one visit. That number is not stored on your device and does not identify you; Google uses your IP address for an approximate location and does not keep it. Elsewhere, analytics and advertising are on, and you can turn them off below.

When you ask the FAQ a question

On the FAQ page you can ask a question in your own words. To find the answer that comes closest, your question is sent to a Cloudflare function, which compares it with the answers using Cloudflare’s AI service (Workers AI). The question is not kept, by us or by Cloudflare, and it is not used to train any model. The search doesn’t need personal details, so please don’t type them in.

When you write to us

The contact form doesn’t send anything by itself. When you press Send, it opens your own email app with your note addressed to info@casaeterea.com, and you send it from there. If no email app opens, the page offers to copy your note, or to open it in Gmail or Outlook in your browser.

You can also write to us on WhatsApp or Instagram. Those messages travel through WhatsApp and Instagram, which Meta runs, under Meta’s own privacy policies.

However you write, we receive what you send: your name, your email address or phone number, and your message. We use it to answer you and, if you book, to arrange your stay. Messages to the house are read by the people who run it.

When you stay with us

To look after your stay we use what your booking holds: your name, your contact details, your dates, the number of guests, and what you tell us about your arrival. If you book through Airbnb or another platform, that platform collects your details under its own privacy policy and passes us what the stay needs.

Selene, the house manager, uses these details to meet you, prepare the house and help you during your stay. When you ask the house to arrange an experience, such as a massage, we give the person who provides it only what they need: your name, the date, and how many of you are coming.

We don’t ask for health details or other sensitive information. If you tell us about something like an allergy so that we can help, we use it for that alone.

Security cameras

Motion-activated, night-vision security cameras cover all the outdoor areas of the property, including the shared outdoor spaces, so guests may be filmed when they are outside.

The house manager can see the footage at any time. We use it only to keep the property and the people on it safe, and to look into an incident if one happens. Footage is kept only as long as it is needed and then deleted, unless it is needed for an incident or the authorities ask for it.

Links to other sites

Links to Spotify, Instagram, Facebook, TikTok, WhatsApp, Google Maps, the press and the places we recommend only take you there. Once you arrive, that site’s own privacy policy applies.

What needs your consent

Almost everything above is needed to answer you, take your booking and look after your stay, so it doesn’t need a separate yes:

• answering your messages;
• taking and managing your booking and your payment;
• preparing and looking after your stay, and arranging the experiences you ask for;
• keeping the property and its guests safe, including with the cameras, which are a condition of staying, as the terms say;
• meeting our legal and tax obligations;
• running the site you asked for: the language choice, the FAQ search and the choices kept in your browser.

Analytics and advertising cookies do need your yes in Europe, and you can change your answer at any time, under Cookies below.

We don’t send marketing emails. If we ever start a newsletter, we will ask you first.

Cookies and browser storage

Analytics and Advertising can be turned on or off here at any time. Your answer is kept in this browser for a year; turning Analytics off also deletes Google Analytics’ cookies.

The site’s own: one cookie, and a few choices kept in your browser’s storage. None of them say who you are or follow you to other sites. You can clear them at any time in your browser’s settings, and the site goes back to its defaults.

Who else handles your data

A few companies run parts of the site and the house for us. They use your data only to do that work, on our instructions (in Mexican law, they are personas encargadas):

• Cloudflare: hosting, the language choice and the FAQ search.
• Google: Google Analytics and, if you allow Advertising, Google’s measurement of our ads and its audience reports.
• Google Workspace: our email.

If we add Meta’s measurement of our ads, Meta joins this list, for visitors who allowed Advertising.

Some of them keep data outside Mexico, in the United States and Europe.

Beyond them, we pass your data on only in these cases, which Mexican law allows without asking you separately:

• to the provider of an experience you ask us to arrange, as described above;
• to the platform you booked through, about that booking;
• to the authorities, when the law requires it, or when it is needed to exercise or defend a right in court.

We don’t sell your data. It reaches Google’s advertising only if you allow Advertising.

How long we keep it

We keep personal data only as long as we need it:

• messages: while the conversation needs them, and up to [2 years] after we last hear from you;
• bookings and payment records: [5 years] after your stay, as Mexican tax law requires;
• camera footage: only as long as it is needed, unless an incident needs it.

Then we delete it. Where the law makes us keep something longer, we set it aside and use it for nothing else until it can be deleted.

Your rights

You can ask us at any time to:

• show you the personal data we hold about you, and how we use it (access);
• correct it, if it is wrong, incomplete or out of date (rectification);
• delete it (cancellation);
• stop using it, or stop a particular use of it (opposition).

In Mexico these are called your ARCO rights.

To use them, write to info@casaeterea.com and include:

• your name, and an email address or postal address where we can reply;
• a copy of an official ID or, if someone writes for you, proof that they may act for you;
• what you are asking for and which data you mean (to see your data, you don’t need to say which);
• to correct something, what should change, with anything that supports it.

We will reply within 20 days, and do what we agreed within 15 days after that. If we need more time, we’ll tell you; the law lets us extend each period once, by the same length. It costs nothing. If you want copies sent to you, we may ask only for what it costs to make or send them.

Sometimes the law makes us keep data even when you ask us to delete it, such as the booking records tax law requires. If so, we’ll tell you.

If you are not happy with our answer, you can go to Mexico’s data protection authority, the Secretaría Anticorrupción y Buen Gobierno. If you live in the European Union, the United Kingdom or Switzerland, you can also complain to the data protection authority where you live.

Withdrawing consent and limiting use

If you have agreed to something, you can withdraw your consent at any time by writing to info@casaeterea.com. It counts from then on, not for what has already been done. If we need the data for something you asked for, such as a booking, withdrawing may mean we can’t go ahead; we’ll tell you first.

To limit how we use or share your data, you can:

• turn Analytics or Advertising off under Cookies, above;
• ask us, as above;
• clear the site’s storage in your browser’s settings.

Security

The site works only over a secure connection. Only the people who run the house, and the companies above, can reach your data, and each only as far as its part of the work needs. No system is perfectly safe; if something went wrong that seriously affected you, we would tell you.

Changes to this notice

When this notice changes, we publish the new version on this page, with its date at the top. If a change affects guests with a stay coming up, we also email them.

This notice is also in Spanish: Aviso de privacidad.