Privacy notice

Data controller

The Alma Initiative (tax ID AIN2306132T9), with its address at Avenida Las Redes 2, Punta de Mita, Bahia de Banderas, Nayarit, C.P. 63734, Mexico, is responsible for processing your personal data when you book ALMA Surf Lodge (Punta de Mita, Nayarit) through this booking engine.

Data we collect

• Identification and contact: first and last name, email address, phone number and country.
• Booking details: dates, room, number of guests and any special requests you write.
• Billing details, only if you enter them to request an invoice.
• Usage data from the booking engine (language, currency, device and the steps you take) to improve the service; on their own they do not identify you.

We do not collect sensitive personal data. Your card details are processed directly by the payment provider; the hotel does not store them.

What we use it for

Purposes needed for your booking: creating, confirming and charging it; contacting you about it (confirmation, changes, reminders and arrival information); handling your requests; invoicing; preventing fraud and meeting legal and tax obligations.

Additional purposes, only if you give your consent when booking: sending you offers and news from ALMA Surf Lodge, and using your stay history (dates, nights, spend and services) so those offers are relevant to you. You can decline using the checkbox at checkout, or withdraw your consent later through the unsubscribe link in any email or by writing to us, without affecting your booking.

Who we share your data with

We do not sell your data. We share it only with those who make your booking possible, who process it on the hotel's behalf and for these purposes: the hotel's property management system (Cloudbeds), the payment provider (Stripe), email and messaging providers, analytics and advertising tools (Google and, if the hotel enables it, Meta) and the booking engine's technology platform (Golden Collection Hotels). Some of these providers are located outside Mexico. We may also share it with authorities when the law requires it.

Your rights

You have the right to access, rectify or delete your data, or to object to its processing (ARCO rights), as well as to withdraw your consent and to limit the use or disclosure of your data. To exercise them, write to hola@almasurflodge.com with your name, the email you booked with and the right you wish to exercise. We will reply within 20 business days.

Marketing and commercial communications

If you accept using the checkbox at checkout, we use your email address to send you offers, promotions and news from ALMA Surf Lodge, and the history of your stays (dates, nights, spend and services) so those communications are relevant to you. It is optional and does not affect your booking. You can withdraw your consent at any time through the unsubscribe link in any email or by writing to hola@almasurflodge.com.

In addition, the hotel and its providers may show you advertising for ALMA Surf Lodge on other websites and platforms (for example, Google and Meta) after you visit this booking engine or the hotel's website (remarketing), and measure which campaigns lead to a booking. Online identifiers are used for this, not your name or email. You can turn off personalized advertising in the ad settings of your Google or Meta account, in your browser, or by writing to us.

Measurement, analytics and advertising

To understand how the booking engine and the hotel's website are used and to measure its campaigns, the hotel may use the following tools when they are active:

• Google Analytics 4 and Google Tag Manager: collect usage data (pages and steps you visit, the dates and number of guests you search for, device, browser, language, approximate country or city and where your visit came from) through cookies and online identifiers. When you complete a booking they record the purchase event with its value and the room chosen, without your name, email or phone number.
• Google Ads and, if the hotel enables it, Meta Pixel: measure the bookings that come from the hotel's ads and allow remarketing audiences to be built with online identifiers. They do not receive your name or email.
• Google Search Console: tells the hotel, in aggregate, how people find its website on Google (searches, pages and clicks). It does not receive your personal data.

Some of these tools process data outside Mexico, mainly in the United States. The purpose is to improve the service and to measure and optimize the hotel's advertising; they are not used to make decisions that affect you individually.

Cookies and similar technologies

The booking engine uses technical cookies, needed to keep your search and your booking while you browse, and, when the hotel enables them, the measurement and advertising cookies and technologies described above. You can reject or delete them in your browser settings; your booking works the same.

Changes to this notice

Any change will be published on this page with its version number and date.