Privacy Policy
This Privacy Policy is preliminary and is being provided so the site is complete. It is pending final review and approval by qualified legal counsel.
Last updated: June 29, 2026
Puerto Morelos Life (“we,” “us,” or “our”) operates the website https://rentals.puertomoreloslife.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site.
Puerto Morelos Life is a vacation rental directory connecting guests with independent property managers in Puerto Morelos, Mexico. We do not process payments, reservations, or bookings.
1. Information We Collect
1.1 Information You Provide Directly
- Account Registration (optional): Name, email address, and password when you create an account.
- Inquiry Forms: Name, email address, phone number (optional), travel dates, number of guests, and message content when you contact a property manager through our Site.
- Newsletter Subscription: Email address when you subscribe to our newsletter.
1.2 Information Collected Automatically
- Analytics Data: We use Google Analytics 4 (GA4) to collect anonymized usage data including pages visited, time on site, referral source, device type, browser type, and approximate geographic location (city-level).
- Cookies: Small text files stored on your device. See Section 6 for details.
- Log Data: IP address, browser type, operating system, referring URLs, and access timestamps collected by our hosting provider (WP Engine).
1.3 Information We Do NOT Collect
- Payment or financial information (we do not process transactions)
- Government-issued ID numbers
- Biometric data
- Data from minors under 18
2. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Transmit your inquiry to the relevant property manager | Your consent (submitting the form) |
| Send a copy of the inquiry to our admin team | Legitimate interest (service quality) |
| Create and manage your user account | Your consent (registration) |
| Send newsletter and marketing communications | Your explicit consent (opt-in) |
| Analyze site traffic and improve user experience | Legitimate interest (site improvement) |
| Comply with legal obligations | Legal compliance |
| Prevent fraud and protect site security | Legitimate interest (security) |
We will never sell your personal data to third parties.
3. How We Share Your Information
We share personal information only in these cases:
- Property Managers: When you submit an inquiry, your name, email, travel dates, guest count, and message are sent directly to the property manager of that listing. From that point, your communication is directly with them, and their own privacy practices apply.
- Service Providers: We use the following third-party services that may process your data:
- WP Engine (hosting) — stores site data on servers in the United States
- Google Analytics 4 (analytics) — collects anonymized usage data
- Google Workspace (email) — processes inquiry notification emails
- Google reCAPTCHA (spam protection on the registration form) — collects device and usage data subject to Google’s privacy policy
- Flodesk (newsletter) — processes newsletter subscriber emails [when active]
- Legal Requirements: If required by law, court order, or government authority.
We do not share your data with advertisers or data brokers.
4. Your Rights (ARCO Rights under Mexican Law)
Under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, updated March 2025), you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Cancellation: Request deletion of your personal data when it is no longer necessary.
- Opposition: Object to the processing of your personal data for specific purposes.
How to exercise your rights: Send an email to tech@puertomoreloslife.com with the subject line “ARCO Request” including:
- Your full name
- A description of what you are requesting
- A copy of an official ID (for identity verification)
We will respond within 20 business days as required by law. If your request is approved, changes will be implemented within 15 business days of notification.
5. Additional Rights for EU/EEA Visitors (GDPR)
If you are visiting from the European Union or European Economic Area, you also have the right to:
- Data Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: At any time, without affecting the lawfulness of prior processing.
- Lodge a Complaint: With your local data protection authority.
6. Cookies
Our Site uses the following types of cookies:
| Cookie Type | Purpose | Provider | Duration |
|---|---|---|---|
| Strictly Necessary | Site functionality, login sessions | WordPress | Session / 1 year |
| Language Preference | Remember your language choice (EN/ES) | Polylang | 1 year |
| Analytics | Anonymized site usage statistics | Google Analytics 4 | Up to 2 years |
| Newsletter | Track subscription status | Flodesk [when active] | Session |
Managing cookies: You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. We also provide a cookie consent banner where you can accept or decline non-essential cookies.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| User accounts | Until you request deletion or 2 years of inactivity |
| Inquiry form submissions | 1 year |
| Newsletter subscriptions | Until you unsubscribe |
| Analytics data | 14 months (GA4 default) |
| Server logs | 30 days (WP Engine default) |
8. Data Security
We implement reasonable security measures to protect your information:
- SSL/TLS encryption (HTTPS) on all pages
- Managed hosting with WP Engine (SOC 2 compliant)
- OAuth 2.0 authentication for email services
- Access restricted to authorized administrators only
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. International Data Transfers
Your data may be transferred to and processed in the United States (where our hosting provider WP Engine and Google services operate). These transfers are necessary for the provision of our services. By using our Site, you consent to this transfer.
10. Children’s Privacy
Our Site is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Third-Party Links
Our Site may contain links to external websites (property managers, social media, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Site after changes constitutes acceptance.
13. Contact Us
For privacy-related questions or ARCO requests:
- Email: tech@puertomoreloslife.com
- Location: Puerto Morelos, Quintana Roo, Mexico
14. Responsible Party (Responsable del Tratamiento)
[Legal business name — to be defined by Kim with her attorney]
Puerto Morelos, Quintana Roo, Mexico
tech@puertomoreloslife.com