Privacy notice
Privacy notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). It applies to this Villas Corax Tulum website, operated by Corax Management.
Last updated: October 29, 2026
Data controller
- Data controller: Corax Management, which operates Villas Corax Tulum.
- Privacy contact email: reserva@coraxmanagement.com.
Data we collect
In the request or quote form on this site, you give us:
- Name.
- WhatsApp number.
- Email (optional).
- Check-in and check-out dates, if you have them.
- Number of guests.
- Type of request, whether your dates are flexible and any message you want to write.
- Whether or not you agree to hear about other Corax properties.
How we use your data
Main purpose: to answer your request, check availability and rates, and contact you via WhatsApp or email to follow up.
Additional purpose, only if you accept it in the form: to suggest other dates or other Corax properties when Villas Corax Tulum isn't available. You can decline or withdraw your consent at any time without affecting how we handle your request.
We don't sell your data or use it for purposes other than those described here.
Online bookings
The booking engine on this site is provided by Sirvoy (Sirvoy Ltd), the system used to manage bookings and availability. The data you enter in it (such as your name, contact details and payment details) is received by Sirvoy to register and charge your booking. Sirvoy uses its own cookies, which are necessary for the engine to work, and may process data outside Mexico.
Providers that process your data
Email delivery. When you send the form, your request reaches us by email through Resend (Resend, Inc.), an email delivery provider. Resend may process this data outside Mexico.
Analytics. When enabled, we use Umami (Umami Software, Inc.) to count visits and clicks anonymously and in aggregate. It doesn't use cookies and doesn't store data that identifies you.
Map. The site’s map is our own and loads nothing from Google. The "Open in Google Maps" and "Get directions" buttons open Google Maps (Google LLC) in a new tab only if you tap them; from then on, Google’s privacy policy applies.
These providers process data only to deliver their service to us.
Data transfers
If you agree to hear about other Corax properties, your request may be shared with the Corax team that manages them, for that purpose only. Otherwise, we don't transfer your data to third parties, except where the law allows or requires it.
Your ARCO rights
You have the right to access, rectify and cancel your data or object to its use (ARCO rights), and to revoke your consent.
To exercise them, write to reserva@coraxmanagement.com with your name, a way to reply to you, the right you want to exercise and an ID.
Changes to this notice
If we change this notice, we will publish the new version on this page with its update date.