DRAFT – needs legal review. This text has not been reviewed by a lawyer yet and may change.
Legal
Privacy policy
Last updated October 2026
This notice explains how MexiSol World handles your personal data when you use mexisol.world or contact us. It is written to meet Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.
Who is responsible for your data
MexiSol World, which operates retreats at Finca El Péndulo, Camino al Saucillo 861, 47600 Tepatitlán de Morelos, Jalisco, México. For anything related to your data, write to mexisol.world@gmail.com.
What we collect
When you fill in the registration form
- Your name, email address and, if you give it, your WhatsApp number
- The retreat you are interested in
- Anything you choose to write in the message field
During screening, before a retreat is confirmed
To decide whether a retreat is safe for you, we ask about your health, medications, supplements and recent use of other substances. This is sensitive personal data under the LFPDPPP. We only collect it with your express consent, given before the screening call, and we use it only for that purpose.
When you browse the site
- If you accept analytics cookies: pages visited, approximate location (city level), device and browser type, how you arrived, and clicks on buttons such as Register or WhatsApp. Collected through Google Analytics 4.
- Security checks on the form by Cloudflare Turnstile, which looks at technical signals from your browser to tell people from bots. It does not use advertising cookies.
Why we use it
Primary purposes, needed for the relationship you ask for:
- To answer your enquiry and arrange a screening call
- To assess whether a retreat is safe for you
- To confirm, organize and follow up on your booking, including travel and dietary needs
Secondary purposes, which you can refuse without affecting your booking:
- To measure how the website is used and improve it (only with analytics consent)
- To tell you about future retreats and events
To refuse the secondary purposes, write to mexisol.world@gmail.com at any time.
Who we share it with
We do not sell your data. We share it only with providers that help us run the service, under contracts that require them to protect it:
- Our customer management system (GoHighLevel), where registration requests are stored
- Cloudflare, which receives the form and checks it for spam
- Google, for analytics, only if you accept analytics cookies
- The facilitators and staff who run your retreat, only the information they need to care for you
Some of these providers store data outside Mexico, including in the United States. By sending the form you agree to these transfers, which the LFPDPPP allows when they are needed for the service you request.
Cookies
Nothing that sets cookies loads until you choose in the cookie banner. You can change your choice at any time with the Cookie settings link at the bottom of every page.
| Type | Provider | Purpose | Duration |
|---|---|---|---|
| Essential | MexiSol World | Remembers your cookie choice (stored in your browser, not sent to us) | Until you clear it |
| Analytics | Google Analytics 4 | Counts visits and clicks | Up to 14 months |
| Video | YouTube (privacy-enhanced mode) | Plays our video when you press play | Set by YouTube |
How long we keep it
- Registration requests that do not become a booking: up to 24 months, then deleted
- Health screening information: for the time needed to run your retreat safely, then deleted or anonymized, unless the law requires us to keep it longer
- Booking and payment records: as long as Mexican tax law requires
- Analytics data: up to 14 months
Your ARCO rights
Under the LFPDPPP you have the right to Access your data, Rectify it if it is wrong, Cancel it when it is no longer needed, and Oppose its use for specific purposes. You can also withdraw your consent or limit how we use your data.
To make a request, email mexisol.world@gmail.com with your name, a way to reply, a copy of an ID (or your representative's authorization), and a clear description of what you are asking for. We will answer within 20 business days and, if your request is granted, act on it within 15 business days after that.
If you believe your rights have not been respected, you may file a complaint with the Mexican data protection authority.
Security
The site is served only over HTTPS. Form submissions travel encrypted, are checked for spam and stored in our customer management system with restricted access. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Changes to this notice
If we change this notice, we will publish the new version on this page with a new date.
Contact
Email mexisol.world@gmail.com or write to us on WhatsApp.