Terms and Conditions
Last updated: February 2026
This Privacy Policy explains how EXOTIC FISH CABO (“we”, “us”, “our”) collects, uses, stores, and protects personal data of customers and users who visit our websites or book fishing charters and related tours in Los Cabos, Mexico (the “Services”).
We process personal data in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable regulations.
By using our websites or providing your personal data to book a Tour, you accept the practices described in this Privacy Policy.
1. Identity of the data controller
The data controller responsible for processing your personal data is:
EXOTIC FISH CABO
Fishing charters and marine tours in Los Cabos, Mexico.
If you have any questions about this Privacy Policy or your personal data, you can contact us through the contact details provided on our website (contact form, email, or phone).
2. Personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
Identification data: name, surname, and, if applicable, the names of other people in your group.
Contact data: email address, phone/WhatsApp number, or other contact details you provide.
Booking and billing data: date and type of Tour, number of people, special requests, payment confirmations or references from payment providers, and basic billing details when required.
Communication data: messages and information you send via contact forms, email, messaging apps, or social networks, as well as our responses.
Technical and browsing data: IP address, device and browser information, pages visited, date and time of visits, and other analytics data collected through cookies or similar technologies, if enabled on our site.
Media data: photos and videos taken by the crew during Tours that may include identifiable images of you and your group (see also our Terms and Conditions).
We do not intentionally collect sensitive personal data (for example health information, religious beliefs, or political opinions). If you voluntarily provide such data (for example allergies, medical conditions), we will use it only to the extent necessary to protect your safety and to provide the Services.
Our Services are intended for adults. We do not knowingly collect personal data directly from children without the involvement or consent of a parent or legal guardian.
3. Purposes of processing
We use your personal data for the following purposes:
Booking management and performance of the Services
To manage inquiries, reservations, deposits, and payments.
To register participants and organize Tours (boats, crew, equipment, schedules).
To communicate with you before, during, and after the Tour (confirmations, meeting points, changes, follow‑up).
Billing, accounting and legal obligations
To issue invoices and receipts when required.
To comply with Mexican tax, accounting, and other regulatory requirements.
Customer support and communication
To respond to questions, complaints, or special requests.
To handle cancellations, changes, and other operational issues.
Marketing and customer relationship (optional)
To send you optional information about EXOTIC FISH CABO (special offers, news, updates), if you consent or if it is permitted by law based on an existing customer relationship.
You can opt out of marketing communications at any time.
Website operation and improvement
To operate and secure our website.
To understand how visitors use our site and improve user experience, using aggregated or anonymized analytics data.
Legal protection and security
To prevent and detect fraud, abuse, or unlawful activities.
To protect our rights, property, and the safety of our customers and staff, and to manage legal claims or disputes.
We will not use your personal data for purposes that are materially incompatible with those listed above, unless we inform you and obtain your consent where required.
4. Legal bases for processing
Depending on the context, we process your personal data on the following legal bases under Mexican law:
Performance of a contract: when we process your data to manage and fulfill your booking, provide the Tour, and deliver related customer services.
Legal obligations: when we must keep certain data for tax, accounting, or regulatory reasons.
Legitimate interests: to operate and improve our business, maintain security, prevent fraud, and defend our legal rights.
Consent: for certain optional processing, such as marketing communications and some cookies or analytics tools, when required.
You may withdraw your consent at any time for future processing by contacting us or using unsubscribe options, without affecting the lawfulness of processing carried out before withdrawal.
5. Cookies and tracking technologies
Our website may use cookies and similar technologies to:
Ensure basic technical operation and security of the site.
Remember certain preferences where necessary.
Collect anonymous or aggregated statistics about traffic and usage (web analytics).
Where required by law, we will inform you about non‑essential cookies and give you the option to accept or reject them (for example via a cookie banner). You can also manage cookies through your browser settings, but blocking some cookies may affect certain functionalities.
If we use third‑party analytics or marketing tools, they may place cookies on your device for their own purposes, subject to their privacy policies.
6. Data sharing and third‑party recipients
We do not sell or rent your personal data. We may share it only with:
Payment service providers (for example card processors or online payment platforms) to process your payments securely; we receive limited information from them (payment status, transaction ID) and not your full card number.
IT and infrastructure providers that host our website, booking tools, and email systems.
Communication tools (email services, messaging apps) used to send booking confirmations, reminders, or customer‑service messages.
Professional advisers (accountants, lawyers) when necessary for compliance, audits, or legal defence.
Public authorities or law‑enforcement agencies when required by applicable law or in response to valid legal processes.
These providers and partners are expected to process personal data only on our instructions, to keep it secure, and not to use it for their own unrelated purposes.
7. International data transfers
Because we operate online and may use global service providers, your personal data can be transferred to and processed in countries outside Mexico, such as the United States, European Union member states, or other regions where our suppliers are located.
Where reasonably possible, we choose providers that offer appropriate safeguards for data protection, including contractual clauses, compliance with recognized frameworks, and adequate technical and organizational security measures.
By using our Services and website, you acknowledge that such international transfers may occur as permitted by applicable law.
8. Data retention
We keep personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with legal obligations. In particular:
Booking and billing data are kept for the period required by Mexican tax and commercial law, and for the limitation period of potential legal claims.
Contact and communication data are kept for the time needed to manage your request and for a reasonable period afterwards for follow‑up and dispute‑handling.
Marketing data (for example newsletter subscriptions) are kept until you unsubscribe or we decide to stop sending such communications.
Media (photos/videos) may be retained for a reasonable period for promotional use, archives, and social‑media presence, in line with our Terms and Conditions and subject to your rights (see below and Terms regarding image rights).
When personal data is no longer needed, we will delete or anonymize it, unless a longer retention period is legally required or permitted.
9. Security measures
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, including:
Using reputable hosting and IT providers.
Limiting access to personal data to staff and service providers on a need‑to‑know basis.
Applying passwords and basic security controls to tools and accounts.
Monitoring and updating software and systems as appropriate.
However, no system is completely secure. Transmission of information over the internet and electronic storage always involve some degree of risk. You acknowledge that you provide personal data at your own risk.
If we become aware of a data‑breach incident that could significantly affect your rights, we will take appropriate steps in accordance with Mexican law and other applicable regulations.
10. Your rights (ARCO and others)
Subject to the conditions and limits set out in the LFPDPPP and other applicable laws, you may have the following rights regarding your personal data (often called ARCO rights in Mexico):
Right of Access: to know whether we hold your personal data and to obtain information about its processing.
Right of Rectification: to request correction or updating of inaccurate or incomplete data.
Right of Cancellation (Deletion): to request the deletion of your personal data when it is no longer necessary for the purposes described here or when processing is unlawful, subject to legal retention obligations.
Right of Opposition: to object, for legitimate reasons, to certain types of processing, including direct marketing in some cases.
Other rights under applicable law: such as limiting processing or withdrawing consent where processing is based on consent.
To exercise your rights or to ask any question about your data, you can contact us using the details on our website, specifying:
Your identity (we may request additional proof if necessary).
Which right you want to exercise and what data your request concerns.
We will respond within the time limits and conditions established by applicable law. If you are not satisfied with our response, you may have the right to lodge a complaint with the competent data‑protection authority in Mexico.
11. Image rights and media
Separate from data‑protection law, individuals may have image, publicity, and personality rights under Mexican and other applicable laws.
As explained in our Terms and Conditions:
We may take photos and videos during Tours that include you or your group.
We may use such media for promotional and marketing purposes, unless you request not to appear.
If you do not want to be included in promotional media, you must inform us before the Tour so that we can take reasonable steps to respect your choice.
If you believe that a photo or video used by EXOTIC FISH CABO improperly uses your image or violates your rights, you can contact us with details of the media in question. We will review your request in good faith and may, at our discretion, modify, limit, or remove the content where appropriate.
12. Third‑party websites and services
Our website and communications may contain links to third‑party websites, booking platforms, social networks, or payment pages that are not operated by EXOTIC FISH CABO. If you click on those links, your interactions will be governed by the privacy policies of those third parties, not this Policy.
We encourage you to review the privacy policies of any third‑party sites you visit or services you use.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in law, our practices, or our Services.
The most current version is the one published on our website with the “Last updated” date. If we make material changes, we may notify you by email or by posting a prominent notice on our website, where appropriate.
By continuing to use our Services after an update, you acknowledge and accept the revised Privacy Policy.
14. Contact
For any question or request regarding this Privacy Policy or your personal data, you can contact EXOTIC FISH CABO through the contact details indicated on our website.