Privacy notice

Data controller

GRUPO NAVIERO DE LA BAHÍA, S. DE R.L. DE C.V. (“Grupo Naviero”), with its address at Avenida Fluvial Vallarta 195, interior 6, Residencial Fluvial Vallarta, C.P. 48312, Puerto Vallarta, Jalisco, México, is responsible for the personal data you provide to us. Our Personal Data Department handles any privacy matter at atencionaclientes@gnbvallarta.com.

Data we collect

Identification and contact data: name, email and phone number.

Booking data: tour, date, number of adults, children and infants, and any extras you choose.

At check-in: the name and signature of the person who signs the release form and, if you authorize it there, your image and voice captured during the tour.

If you message us on Facebook, Instagram or WhatsApp: your profile name and the content of your messages.

Browsing data (pages visited, device, interactions), only through the cookies you accept.

Sensitive data: your statement that you are in good health to take part and, only if you provide it, information about a medical condition, injury or allergy, so we can assess whether you can take part safely and assist you on board. We use it only for that purpose, with your express written consent, which you give by signing the release form, and we do not share it except with emergency services when necessary.

Payments are processed directly by Mercado Pago or PayPal: Grupo Naviero does not receive or store your card details.

Necessary purposes

We use your data to: confirm, operate and give you access to your booking; send your confirmation and QR code; contact you about operational changes (weather, schedules, departure point); handle cancellations, changes and refunds; keep you safe and assist you on board; answer your questions and requests; and meet legal and tax obligations. These purposes are necessary to provide the service and do not require your consent.

Purposes that require your consent

Only if you click “Accept” in the cookie notice: measuring site use and showing you ads on Google, Facebook and Instagram. You can withdraw that consent under “Cookie preferences” at the bottom of every page.

Only if you authorize it in the release form: using images of you captured during the tour in our media.

We do not use your booking data to send you advertising.

Who we share your data with

Processors, which handle data on our behalf and only for the service they provide to us: hosting for the site and the booking system, email delivery and the virtual messaging assistant. Some store data on servers outside Mexico, for example in the United States.

Mercado Pago and PayPal process your payment directly and handle your data under their own privacy notices; we share with them what is needed to charge your purchase. This transfer, and those we make to authorities when required by law or court order, do not require your consent under Mexican law.

Google and Meta receive browsing data (never your name, email or phone) only if you click “Accept” in the cookie notice. That click is your consent to this transfer, which you can withdraw under “Cookie preferences”.

We do not sell your personal data.

Your rights and how to exercise them

You may access, rectify or cancel your data, or object to its use (ARCO rights under Mexican law), and you may also withdraw your consent or limit its use, by writing to atencionaclientes@gnbvallarta.com. Your request must include: your name and an email for our reply; a copy of your ID (or, if acting for someone else, proof of representation); a clear description of what you are asking for; and any detail that helps us find your information, such as your booking code.

It is free of charge; we may only charge reproduction or shipping costs. We will reply through the same channel within 20 business days and, if granted, carry it out within the following 15 business days; both periods may be extended once for an equal period when justified.

Cookies & tracking technologies

Necessary: “NEXT_LOCALE” remembers your language; “gnb-consent” (in your browser) remembers your cookie choice for 12 months; while you book, “gnb-checkout-borrador” and “gnb-checkout-contacto” keep the details you enter in that tab and are deleted when you close it. They cannot be turned off from the site.

Analytics (Google Analytics, “_ga” cookies) and advertising (Meta Pixel, “_fbp” cookie): they only use cookies if you choose “Accept”. If you don't, the Meta Pixel is not loaded and Google Analytics stores no cookies or identifiers in your browser, but it does send Google basic signals without identifiers (for example, that a page was visited), which Google uses to estimate statistics.

The Google Maps map on the contact page only loads if you accept cookies or click “Show map”. We also use visit measurement from our hosting provider that does not use cookies.

You can change your choice at any time under “Cookie preferences” at the bottom of every page, or in your browser settings.

Messages on Facebook and Instagram

If you message us on Messenger or Instagram, a virtual assistant may reply and, when you ask for it, a member of our team. We use those messages only to assist you; to do so they are processed by our technology providers (artificial intelligence and service hosting). You can ask us to delete your conversation by writing to atencionaclientes@gnbvallarta.com.

Retention

We keep booking and billing data for 5 years, for tax obligations; other data only for as long as needed for the purposes above. After that we block and then delete it.

Minors

Bookings are made by an adult. For minors we record how many travel and their age range; at check-in, their parent or guardian signs the release form on their behalf.

Visitors from the EU and the UK

Where the GDPR applies, we process your data to perform your booking (Art. 6(1)(b)), to meet legal obligations such as tax records (Art. 6(1)(c)), and on the basis of your consent for analytics and advertising cookies (Art. 6(1)(a)). Data is processed in Mexico and by providers in the United States. You may request access, rectification, erasure, restriction, portability or objection, and withdraw consent at any time, by writing to atencionaclientes@gnbvallarta.com, and you may complain to the data protection authority of your country of residence.

Changes to this notice

Any change to this notice will be published on this page with its update date.

If you believe your right to personal data protection has been violated, or you did not receive a reply to your request, you may file a complaint with Mexico's Secretaría Anticorrupción y Buen Gobierno, the authority under the Federal Law on Protection of Personal Data Held by Private Parties.