Privacy notice

Privacy notice

Last updated: 19 de septiembre de 2026

1. Who is responsible for your data

Tarifabaja Experiencias Turísticas, S.A. de C.V. («Tarifabaja», «we», «us»), with its address at Av. López Mateos Sur 2375, locales 49 y 50, Zona Ramal, Plaza del Sol, Zapopan, Jalisco, México, and with the website https://tarifabaja.com, is responsible for the use and protection of your personal data.

This notice is issued in accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties), its Reglamento (Regulations) and the Lineamientos del Aviso de Privacidad (Privacy Notice Guidelines).

2. What personal data we collect

We collect your data when you provide it to us directly, whether at our offices, by phone, by email, by WhatsApp, through our website or through our social media accounts, and also when you browse our website.

2.1 Identification and contact data

Name, date and place of birth, nationality, address, home phone number, cell phone number, email address, signature and, when the service requires it, information from your official ID, passport or visa.

2.2 Employment data

Occupation or position, work address, work email address and employment references.

2.3 Tax data

RFC (Mexican taxpayer ID number), legal business name, tax regime, tax address and CFDI use (the intended use of the Mexican electronic invoice), when you request an invoice.

2.4 Asset and financial data

When you purchase services on credit or apply for a commercial line of credit, we may collect tax information, credit history, income, bank accounts and business references.

This data requires your express consent. We only collect it when you expressly authorize it at the time you request the service, by means of your signature or your explicit acceptance on the corresponding form. If you do not give that consent, we can continue to serve you through the payment methods that do not require it.

2.5 Data from WhatsApp conversations

When you contact any of the WhatsApp Business numbers owned by the company, we keep your WhatsApp number, your profile name, the content of the messages you exchange with our agents (texts, images, audio, videos, documents, locations and contacts you share), the date and time of the messages and their delivery and read statuses.

The full details of how that conversation archive works are in our conversation archive privacy policy.

2.6 Browsing data

IP address, browser and device type, pages visited, date and time of access, and the information described in the cookies section of this notice.

If you leave a comment on our website, we collect the data from the comment form, your IP address and your browser’s user agent string, to help detect spam. If you register as a user, we also keep your profile information, which you can view, edit or delete at any time, except for your username.

2.7 Sensitive personal data

As a general rule, we do not collect sensitive personal data. However, for certain travel services you may need to inform us about health conditions, disabilities, mobility requirements, dietary restrictions for medical or religious reasons, or data needed to purchase travel assistance insurance.

This data is sensitive and requires your express written consent. We only collect it when you provide it to us voluntarily so that we can provide the service you request, and we only use it for that purpose and to share it with the corresponding service provider (airline, hotel, tour operator, insurance company). We do not use it for any other purpose.

3. What we use your data for

3.1 Primary purposes

These purposes are necessary to provide the service to you. Without them we cannot serve you:

• Identifying you and verifying your identity.
• Preparing quotes and estimates for travel services.
• Booking, purchasing, issuing and following up on the services you request (flights, lodging, packages, transfers, insurance, tours and related services).
• Sending you operational information about your services: confirmations, changes, cancellations, itineraries and travel notices.
• Issuing tax receipts and keeping the administrative and accounting records of the transaction.
• Managing charges, payments, refunds and disputes.
• Responding to your questions, complaints and requests.
• Complying with legal, tax and regulatory obligations applicable to the tourism industry.
• Where applicable, evaluating the granting and monitoring of commercial credit.

3.2 Secondary purposes

These purposes are not necessary to provide the service to you, but they help us improve and offer you better options:

• Sending you promotions, offers, and marketing and advertising communications.
• Inviting you to take part in promotions, contests and loyalty programs.
• Informing you about new products or services.
• Evaluating the quality of the service our agents provide to you.
• Analyzing consumption habits and history to personalize our offers.
• Preparing internal statistics and market research.

You may refuse these secondary purposes without affecting the service we provide to you. To do so, send an email to direccion@tarifabaja.com stating which ones you object to, or call 33 3670 0644, extension 104. You can also unsubscribe from our promotional emails using the link at the bottom of each one. You have five business days from the time you become aware of this notice to state your refusal, and you may also do so at any time afterward.

4. Cookies and tracking technologies

Our website uses cookies and similar technologies so that it works properly, to remember your preferences, to measure use of the website and to show you relevant advertising.

• Necessary cookies: enable browsing and the basic functions of the website.
• Comment cookies: if you leave a comment, you can choose to save your name, email address and website. These cookies last one year and are for your convenience, so that you do not have to enter your details again.
• Meta Pixel, from Meta Platforms, Inc. It allows us to measure, in aggregate form, which pages are visited and how the website is used, to see the results of our campaigns and to show you ads on Facebook and Instagram. It records events such as a page visit, a form submission, a file download and time spent on the site.
• Google reCAPTCHA v3, from Google LLC. It protects our forms against automated submissions. To work, it analyzes your interaction with the website and sends that information to Google.

You can disable or delete cookies in your browser settings, and you can manage personalized advertising from Meta in the settings of your own Facebook or Instagram account. If you disable cookies, some functions of the website may stop working properly.

If in the future we add other measurement or advertising tools, we will reflect this in this section when we publish the updated version of this notice.

5. Who we share your data with

We transfer your personal data only to the following recipients and for the following purposes:

• Travel service providers (airlines, hotels, wholesale tour operators, car rental companies, insurance companies, consolidators and reservation systems), both Mexican and foreign, so that we can book and provide the service you purchase. This transfer is necessary to perform our contract with you.
• Technology providers that operate our customer service, hosting, messaging, measurement and backup tools, who process the data on our behalf and under our instructions. Among them, Google LLC (anti-fraud protection for forms).
• Meta Platforms, in its capacity as provider of the WhatsApp Business messaging service through which your messages travel.
• Financial institutions and payment processors, to process charges and refunds.
• Companies in the same group, for internal administration and business management.
• Competent authorities, when there is a duly grounded and reasoned request, or when the law requires us to do so.
• Legal advisors, accountants and auditors, when necessary to comply with obligations or to defend our interests.

The transfers above are among those that do not require your consent under Article 37 of the Law and Article 68 of its Reglamento (Regulations), or they are necessary to perform the contract entered into with you. Any transfer other than those above will require your consent.

We do not sell your personal data. Third parties that receive your data are required to process it in accordance with this privacy notice.

6. How long we keep your data

We keep your personal data for as long as our relationship with you lasts and, afterward, for the periods required by law:

• Tax and accounting information: five years from the date on which the corresponding tax returns were filed or should have been filed, in accordance with Article 30 of the Código Fiscal de la Federación (Federal Tax Code).
• Travel service file and receipts: five years from the end of the trip or the provision of the service. This period allows us to handle claims, warranties and consumer protection obligations, and it matches the tax retention period for the receipts that are part of the same file.
• Customer identification and contact data: for the duration of the business relationship and five years after the last transaction.
• Employment data of employees and job applicants: five years after the end of the employment relationship. Data of applicants who are not hired is kept for twelve months, unless the person authorizes us to keep it longer for future openings.
• Contact data for promotional purposes: until you request to unsubscribe or revoke your consent.
• WhatsApp conversations: they are part of your customer file and are kept for as long as they are necessary for the purposes of this notice and for the periods the law requires us to keep them. The details of that processing are described in the conversation archive privacy policy. You may request their deletion at any time in accordance with section 11 of this notice.
• Video surveillance data, when captured at our premises: thirty calendar days, unless it must be kept longer because of an incident or a request from an authority.

Once those periods have ended, your data is blocked for the period during which any liability could still exist and is then securely deleted.

7. How we protect your data

We have adopted administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction, and unauthorized use, access or processing. Access is limited to staff who need it for their role, connections to our systems are encrypted and our staff is required to maintain confidentiality.

8. How to exercise your ARCO rights

ARCO rights are your rights of Access, Rectification, Cancellation and Opposition. You have the right to know what personal data we hold about you, what we use it for and the conditions of that use (Access); to request the correction of your information when it is outdated, inaccurate or incomplete (Rectification); to ask us to delete it from our records when you believe it is not being used properly (Cancellation); and to object to the use of your data for specific purposes (Opposition).

8.1 How to submit your request

Through any of these channels:

• Email to direccion@tarifabaja.com
• Phone 33 3670 0644, extension 104
• In writing at Av. López Mateos Sur 2375, locales 49 y 50, Plaza del Sol, Zapopan, Jalisco

8.2 What your request must include

• Your name and a means of sending you our response.
• A copy of an official ID proving your identity, or that of your legal representative together with the document proving the representation.
• A clear description of the data regarding which you wish to exercise your right, and of the right you wish to exercise.
• Any information that makes it easier to locate your data.
• If you are requesting a rectification, state the correction and attach the document that supports it.

8.3 Response times

• We will respond within a maximum of twenty business days from the date we receive your request.
• If your request is granted, we will carry it out within the fifteen business days following that response.
• If we need additional information to handle your request, we will ask you for it within five business days of receiving it.
• The periods above may be extended only once for an equal period, when the circumstances of the case justify it. In that case we will notify you.

Exercising ARCO rights is free of charge. You will only need to cover, where applicable, justified shipping costs or the cost of reproduction in copies or other formats.

In some cases the law allows us not to fulfill your request or not to cancel your data immediately, for example when there is a legal obligation to keep it or a pending claim. If that is the case, we will explain it to you.

9. Revoking your consent

You may revoke at any time the consent you have given us for the processing of your personal data by writing to direccion@tarifabaja.com or calling 33 3670 0644, extension 104.

Please note that we may not be able to fulfill your request immediately in every case, because a legal obligation may require us to continue processing your data. Likewise, revoking consent for certain purposes may mean that we can no longer provide the service you requested, or that your relationship with us ends.

10. Limiting the use or disclosure of your data

In addition to your ARCO rights, you may ask us to limit the use or disclosure of your personal data, through the same contact channel. You may also request to be added to the Registro Público para Evitar Publicidad (Public Registry to Avoid Advertising) of the Procuraduría Federal del Consumidor (Federal Consumer Protection Agency), at repep.profeco.gob.mx, to stop receiving advertising.

11. Deleting the data from your conversations

If you contacted us by WhatsApp and want us to delete the data from those conversations, follow our data deletion instructions, which explain the procedure step by step, what we delete and what information we may be required to keep.

12. Changes to this privacy notice

This notice may be modified, changed or updated as a result of new legal requirements, our own needs arising from the products or services we offer, our privacy practices, changes in our business model, or other causes.

We commit to keeping you informed about those changes by publishing the updated version on this same page, showing the date of the last update. We recommend that you review it periodically.

13. Data protection authority

If you believe that your right to the protection of personal data has been harmed by any conduct on our part, or you suspect a violation of the provisions of the Law, you may file a complaint or report with the competent personal data protection authority, whose contact information you can find on its official website.

14. Acceptance

By providing us with your personal data through any of the channels described in this notice, you state that you have read, understood and accepted it, except for those purposes or transfers that you have refused in accordance with the corresponding sections.

Date of last update: 19 de septiembre de 2026.