Learn about the preventive measures implemented by Grupo Xcaret. Continue reading

PRIVACY NOTICE

México Destination Club (hereinafter MDC)

If you are reading this, it means that you are a responsible user who takes care of your personal data.
In this privacy notice we are going to explain why we request your data, under what circumstances and how we take care of it.

About the data controller

The first obligation we have with you is to inform you of the identity of the responsible for this site:

  • Company Name: Experiencias Xcaret Loyalty, S.A.P.I. de C.V. (hereinafter EXL).
  • Registered office: Carretera Chetumal - Puerto Juárez, Km 282 B, Colonia Rancho Xcaret, Municipality of Solidaridad, Playa del Carmen, State of Quintana Roo, Z.C. 77710.
  • Our activity: We are a commercial company, a subsidiary company of Grupo Xcaret, that offers access to Discounts and Benefits, for people who acquire the México Destination Club Membership, as well as various Vacation Packages in our unique hotels, including ecological, cultural, and fun experiences in our natural, ecological, and adventure parks, to promote the benefits of our Membership.
  • Data controller: The Information Protection Department is responsible for ensuring the security of your information.
  • Data controller’s email:

It is important that you know that this privacy notice is part of the following areas of EXL:

  • MDC Marketing
  • MDC Operations
  • MDC Contact Center
  • MDC Call Center

The information we request from you and when

We will now describe the different situations in which your personal data may be required:

  1. Invitation to learn about México Destination Club Membership, we will request: (i) name, (ii) age, (iii) place of residence, (iv) email, (v) occupation, and (vi) country where you reside.
  2. When you agree to visit our club and are transferred to our destinations, we will ask you for: (i) name, (ii) hotel you are visiting us from, and (iii) information about the transportation you took to our club.
  3. When you call our Call Center to reserve Vacation Packages, we will ask you for: (i) full name, (ii) email, (iii) telephone number, (iv) marital status, (v) date of birth, (vi) nationality, and (vii) we will also request information on the means with which you make the payment to finalize the purchase.
  4. When we receive an email in our Call Center, we will request: (i) full name and (ii) telephone number.
  5. When you complete a referral form, we will request: (i) full name, (ii) telephone number, and (iii) email address of the people you refer to us.
  6. When you complete referral information through your Member portal, we will request: (i) full name, (ii) telephone number, and (iii) email address of the people you refer to us.
  7. If you are in our destinations and decide to agree to learn about the club, we will ask you for: (i) full name, (ii) full name of your guests and companions, (iii) telephone number, (iv) email, (v) dates of birth, (vi) marital status, (vii) nationality, (viii) place of residence, (ix) occupation, and (x) information regarding the place where you are staying.
  8. To grant Vacation Package certificates, we will request: (i) full name, (ii) telephone number, (iii) email, (iv) address, (v) place of residence, and (vi) Federal Taxpayer ID, hereinafter RFC or Tax ID.
  9. When we interact with our Members through our Contact Center, by call or by email, we will request information related to your contract: (i) Name of the owners or beneficiaries, (ii) email, (iii) date of birth, (iv) telephone number, and (v) in case of making a payment, we will need to validate the information provided to make some type of charge, this being the last 4 digits of your card, as well as the issuing bank.
  10. When you require an invoice for your Vacation Package, we will request: (i) RFC, (ii) address, and (iii) email.

VERY IMPORTANT!

  • We never request sensitive personal data.
  • Neither do we ask you for your username and password by phone or email.
  • We never request credit or debit card information unless you are making a purchase.

Processing Primary Purposes

Another of our responsibilities is to explain to you what we use for, how we store, and how we process your personal data:
When you contact us through any official EXL means, [connect to this site] to consult, quote, buy, request information, or register in any of our forms, you are providing us with personal information and you are giving your consent for your Information to be collected, used, managed, and stored by us, only as described in this notice.

The purposes depend on the form where you have entered your personal data and are the following:

  1. Invitation to learn about our MDC Membership
    So that you can participate in the tour and presentation of our MDC Membership in our destinations.
  2. When you contact our Call Center
    To be able to validate your information so that you can purchase Vacation Packages to our destinations to attend the presentation of our MDC Membership, as well as to follow up on your purchase, perfect, carry out, and control the correct fulfillment of your Vacation Package and comply with EXL´s legal obligations.
  3. When you visit our destinations to learn about the MDC Membership
    To validate the information in the invitation you received and be able to pay for your transfer.
  4. When you register to attend our MDC Membership presentation
    In order to validate your information to verify the authenticity of your invitation, and learn a little more about you, in case you decide to become our Member.
  5. When you purchase a Vacation Package certificate
    To be able to fill out the information on the certificate so that you can acquire the package.
  6. When we contact you from our MDC Contact Center
    To assist on the use and monitoring of your acquired Membership, including, but not limited to: (i) sending reservation confirmations by email, (ii) updating the payment method for recurring charges, and (iii) data validation to add beneficiaries.

Processing Secondary Purposes:

  • Provide the services and products you have purchased.
  • To carry out internal studies on demographic and statistical data.
  • To know the interests of our users.
  • To support and improve the services offered on our site, so that we can provide you with a more satisfactory experience.
  • Inform our users about new products or services that are related to the one contracted.
  • Evaluate the quality of the service.
  • Inform about changes to our products or services and provide better service to the user.

The above processing purposes are subject to your consent, your data will NEVER be used for a purpose other than what is mentioned in this notice, and we will NEVER sell your information.

About the use of cookies

Cookies are text files that are automatically downloaded and stored on the hard drive of the user´s computer when browsing a specific Internet page, which allow the Internet server to remember some data about this user, including their preferences for viewing the pages on that server, name, and password. In some sections of our site, we require that the client has cookies enabled since some of the functionalities require them to work.

In the case of the use of cookies, the "help" button found in the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable all cookies.

Web Notifications

When entering our site, you will be offered the possibility of accepting or denying notifications to be displayed, with the sole purpose of sharing information about promotions and offers of our products, these can be displayed on both desktop and mobile devices. Notifications can work even if your browser is closed as system notifications.

These can always be deactivated when you decide, from the options of your browser in the notifications section.

Limitation of use and disclosure of information

The information provided by the user is secured by a personal identification number that only the user can access and of which only he or she is aware. We recommend that you do not share or reveal your password to anyone. In this matter, the EXL team has focused its efforts to offer the most modern and up-to-date technology to offer you the greatest possible security. You can stop receiving promotional messages by landline or cell phone, stop receiving emails or advertising through postal mail, requesting your cancellation by email to:

If you participate in the promotional service via email, you may at any time deactivate the service (Opt-out) in relation to promotional email communications. We will inform you in each of them how to unsubscribe in a simple way and at no cost. If you have an account on our websites, you can modify the means by which we communicate with you at any time through the notification center, and you can cancel your subscription whenever you wish from your subscriptions and preferences.

Rights that you have when providing us with your data (ARCO Rights)

  • Request access to your personal data.
  • Request rectification.
  • Request cancellation.
  • Request the limitation of the processing (its use and disclosure).
  • Oppose the processing of your personal information.
  • The portability of your data.
  • Revocation of consent for processing personal data.

The exercise of these rights is personal, which means that the interested party (the data subject) must request it to the data controller, that is, the Information Protection Department.

To exercise any of the above rights, you can download and fill out the following form and send it along with a copy of your identification, to:

  • Data controller’s email:
  • Open: Monday to Friday from 9:00 a.m. to 7:00 p.m. (EST)

We will get back to you quickly, within 15 business days. We suggest you keep your information up to date so that we can provide you with a more personalized service.

Storage time for your data

We will retain your data until you ask us to delete it.

Data transfer

It is important to notify that, for marketing purposes and only if you are not a Member, we share your information with our affiliate companies: Experiencias Xcaret Web S.A.P.I. de C.V., Experiencias Xcaret Hoteles S.A.P.I de C.V, Travel Nature Experiences S.A.P.I de C.V, Experiencias Xcaret Parques S.A.P.I. de C.V., to offer you the best deals for our Hotels and Parks through official authorized channels in case you have subscribed with us to receive this information.
We also send information to comply with the aforementioned uses and comply with the obligations contracted with you, our Members.

Protecting your information

We have implemented security measures to protect your data:

  • Use of SSL (Secure Socket Layer) certificates on our sites.
  • Safety procedures for our staff.
  • Limitation of access to the databases where the data is stored.
  • Implementation of best practices on servers to keep your information secure.
  • Implementation of controls to comply with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) and the General Data Protection Regulation (Reglamento General de Protección de Datos RGPD).

    • Use of images and sound collected through our internal video surveillance systems

Concerned about the safety of our visitors, guests, and collaborators, as well as our administrative facilities, hotels, vacation club, and parks, it is necessary to inform you that we have internal video recording systems and circuits, which can capture images and in some cases sounds, considered personal data, which will be processed and protected in the terms provided in this privacy notice.

Laws that this privacy notice incorporates

Authority

If you believe that the protection of your personal data has been breached, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales INAI).

Acceptance of terms

When you provide us with your information and check the consent box, it means that you agree for your information to be processed in the aforementioned terms.

Modifications to our privacy notice

We recommend that you consult this PRIVACY NOTICE periodically, as we make updates and modifications to bring it into line with applicable laws on the protection of personal data and internal policies.
If you enter your personal data in any of our purchase forms and check the acceptance checkbox and web notifications, you will be notified about the update.

Last updated on 04/01/2024 (April 1st, 2024).