Privacy policy

1. Data controller

Casa Leah Puerto Escondido is operated by The Mint Group S. de R.L. de C.V. (trading as Butik Stays), a Mexican company with RFC MGR080225NZ4 and its registered address at Bosque de Radiatas 18, 05120, Mexico City.

2. The data we collect

• Identification: full name, date of birth, nationality and ID number.
• Contact: email, phone and address.
• Reservation: dates, number of guests, suite and special requests.
• Payment: handled by a secure third party; we never store your full card details.
• Messages: what you send us on WhatsApp, social media or by email.
• Website use: cookies, IP address, browser, pages visited and how you arrived (analytics).

3. Why we use it

• To manage your reservation, arrival, departure and the services of your stay.
• To reply to you and stay in touch before, during and after your stay.
• To send offers, only with your consent; you can unsubscribe at any time.
• To improve the website and our service.
• To meet legal and tax obligations.
• To prevent fraud and keep everyone safe.

4. Who we share it with

• Reservations and booking engine: Cloudbeds.
• Guest app: Whistle.
• Messaging and CRM: GoHighLevel (WhatsApp, Instagram and Facebook).
• Payment processors.
• Infrastructure and messaging assistant: Supabase and Anthropic (Claude), which help us answer your messages.
• Advertising and analytics: Meta, Google Ads and Google Analytics.
• Tax and legal authorities, when Mexican law requires it.

5. Cookies

We use cookies the site needs in order to work, and optional cookies for analytics and advertising. You can manage them in your browser.

6. Your ARCO rights (LFPDPPP)

You may request access to, rectification or cancellation of your data, or object to its use, and you may limit its use or withdraw your consent. Write to hello@casaleah.co with your full name, a contact email, the right you wish to exercise and a copy of your ID.

7. Visitors from the European Union (GDPR)

You also have the right to data portability, to erasure, and to lodge a complaint with your local data protection authority.

8. How long we keep it

For as long as your reservation requires, and as accounting (five years for tax records under Mexican law) and other legal obligations demand.

9. Security

We apply reasonable physical, technical and administrative safeguards. No transmission over the internet is entirely secure, but we work to look after your data well.

10. Minors

We do not knowingly collect data from anyone under 18. Reservations are made by an adult. If you believe a minor has shared data without consent, write to us and we will delete it.

11. International transfers

Some of our providers operate outside Mexico. By using our services, you consent to these transfers, always under appropriate safeguards.

12. Changes to this policy

If we update this policy, we will publish the new version here with its date.

13. Contact

For privacy matters: hello@casaleah.co · WhatsApp +1 786 917 6777.