Effective date: January 13, 2026

This Privacy Policy explains how Xibalba Divers MX collects, uses, stores, and protects personal data when you visit our website, contact us, or request to book a dive or course.

Business address
Av Balamcanché Manzana 30 Lote 2C, Playacar, 77710 Playa del Carmen, Q.R., Mexico

1. Data controller and contact

Xibalba Divers MX is the data controller responsible for the processing of your personal data.

Contact details
Email: xibalbadiversmx@gmail.com
Phone and WhatsApp: +52 984 177 9735

2. Personal data we may collect

We may collect the following categories of data, depending on how you interact with us.

Identity and contact data
Name, email address, phone number, WhatsApp number, and booking details you provide.

Booking and diving related information
Certification level, number of logged dives, date of last dive, group size, preferred dates, and any notes you share about experience or preferences.

Health related data you voluntarily provide
If you share medical or fitness information relevant to diving safety, we process it only to manage your booking and safety planning. Please only share what is necessary.

Technical and usage data
IP address, device and browser information, pages viewed, approximate location, and interaction data collected via cookies and analytics tools.

3. How we collect data

We collect data when you:

  1. Fill out a contact form or booking request
  2. Message us via WhatsApp, email, or social channels
  3. Subscribe or request information
  4. Browse our website, where cookies and similar technologies may collect technical data

4. Purposes for processing your data

We use personal data for the following purposes.

Primary purposes

  1. Respond to your enquiries and messages
  2. Process booking requests and communicate logistics
  3. Confirm certification requirements and dive suitability
  4. Provide customer support before and after your dive or course
  5. Improve website performance, security, and user experience

Secondary purposes

  1. Marketing communications, only when permitted or where you have requested information
  2. Analytics and reporting to understand website traffic and content performance

You can opt out of marketing messages at any time.

5. Legal basis and consent

We process personal data based on one or more of the following:

  1. Your consent when you submit forms or contact us
  2. The need to process your request or provide a service you asked for
  3. Compliance with applicable legal obligations
  4. Legitimate interests such as security, fraud prevention, and improving our services

6. Sharing and transfers of data

We may share personal data with service providers that help us operate the website and communications, such as website hosting, analytics providers, embedded content platforms, and email or messaging tools. These providers process data only under our instructions and for the purposes described in this policy.

International transfers may occur when service providers store or process data outside Mexico. When this happens, we take reasonable steps to ensure appropriate safeguards are in place.

7. Cookies and analytics

Our website may use cookies and similar technologies to help the website function properly, understand traffic and improve content, and measure performance of pages and user journeys.

You can control cookies through your browser settings. Disabling cookies may affect some site functionality.

8. Data retention

We keep your personal data only as long as necessary for the purposes described, including handling your enquiry and booking, meeting legal or safety obligations, and resolving disputes. When data is no longer needed, we delete or anonymize it using reasonable measures.

9. Security

We apply reasonable administrative, technical, and physical safeguards designed to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. No system is 100 percent secure, but we work to maintain appropriate protections.

10. Your rights, including ARCO rights

Under Mexican law, you may have the right to Access, Rectify, Cancel, or Object to the processing of your personal data, commonly known as ARCO rights.

To exercise these rights, contact us and include:

  1. Your full name and a way to contact you
  2. The right you want to exercise
  3. Details that help us locate your data, such as the email used on the booking form

We may request information to verify your identity before processing your request.

11. Children’s privacy

Our services are intended for adults and certified divers. If a minor’s data is provided for training or booking purposes, it must be provided by a parent or legal guardian, or with their authorization as applicable.

12. External links

Our website may include links to third party websites or platforms. We are not responsible for their privacy practices. Please review their policies directly.

13. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

14. Contact

Xibalba Divers MX
Av Balamcanché Manzana 30 Lote 2C, Playacar, 77710 Playa del Carmen, Q.R., Mexico
Email: xibalbadiversmx@gmail.com
Phone and WhatsApp: +52 984 177 9735