Privacy Policy

Casa Khnum (“we,” “our,” or “us”) values the privacy of all individuals who interact with our website and services. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (Mexico), the California Consumer Privacy Act (CCPA), and the General Data Protection Regulation (GDPR) of the European Union.

By accessing or using our website, you consent to the collection and processing of your personal data as described below.

1. Data Controller. The entity responsible for processing your data is Casa Khnum, located in Puerto Escondido, Oaxaca, Mexico. You may contact our Data Protection Officer at privacy@casakhnum.com.

2. Data We Collect. We may collect the following categories of personal data:

  • Identification data — name, phone number, email, address, and nationality.
  • Financial data — payment information processed through secure third-party gateways.
  • Technical data — IP address, browser type, device ID, and cookies or similar technologies.
  • Preference data — language, interests, and interactions with Casa Khnum’s content or services.

3. Purpose of Data Processing. We process personal data to:

  • Provide our hospitality, pre-sale, and communication services;
  • Process and confirm reservations, payments, and customer requests;
  • Send relevant updates, promotional content, and project news (only with prior consent);
  • Comply with applicable legal and tax obligations;
  • Improve user experience through analytics and personalization tools.

4. Legal Basis for Processing. We process data under one or more of the following lawful bases:

  • Your consent to use your data for communication and promotional purposes;
  • Our contractual obligation to provide services or confirm bookings;
  • Legal compliance with local, federal, or international regulations;
  • Casa Khnum’s legitimate interests in maintaining contact with clients and ensuring service security.

5. Data Storage & Security. Your data is securely stored on encrypted servers located in Mexico and the United States. Casa Khnum uses physical, digital, and administrative security measures — including SSL/TLS encryption, restricted access, and data minimization practices — to prevent unauthorized access, loss, or alteration of personal data.

6. Cookies and Tracking Technologies. Casa Khnum uses cookies, pixels, and similar technologies to enhance navigation, personalize content, and analyze usage patterns. You may configure your browser to reject cookies; however, some site features may not function properly if you do so.

7. Third-Party Disclosure. Casa Khnum does not sell or rent personal data. We may share limited data with trusted third parties that assist us in payment processing, analytics, or hosting — all of whom are bound by strict confidentiality and data protection agreements.

8. ARCO Rights (Mexico) and Data Subject Rights (GDPR/CCPA). You may exercise your rights to Access, Rectify, Cancel, and Oppose (ARCO rights) the processing of your personal data, or request data portability, limitation, or deletion under GDPR or CCPA standards. To exercise these rights, send a written request to: privacy@casakhnum.com. Your request will be answered within 20 business days of receipt.

9. International Data Transfers. If your data is transferred to servers or partners located outside Mexico, such transfers are made in accordance with adequate protection standards established by applicable laws, ensuring equivalent safeguards for your information.

10. Minors’ Privacy. Casa Khnum does not knowingly collect or process data from individuals under 18 years of age. Parents or guardians who believe