How we protect your information
Last updated: April 24, 2026
In compliance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), Agua de Luna Spa provides this privacy notice. Please read it carefully.
1. Identity of the data controller
Agua de Luna Spa, with address at Presbítero José Ceja 7, Valle de Bravo, Estado de México, ZIP 51200, is the controller responsible for the use, protection, and processing of your personal data under this notice.
For any matter related to your information, contact us at elensuenovalledebravo@gmail.com or by phone at 722 585 2782.
2. Data we collect
When you book a service or contact us, we collect: full name, phone, email, tentative visit date, group size, and where applicable, medical information relevant to adapting treatments (allergies, pregnancy, conditions requiring adjustment).
We do not collect sensitive data such as ideology, political affiliation, religion, or financial information beyond what is strictly necessary to process your payment.
3. Purposes of processing
Your data is used to: confirm and operate your bookings, contact you about your visit, process payments, comply with tax obligations (in case of invoicing), and send reminders or follow-ups directly related to your experience.
Secondary purposes —such as promotions, satisfaction surveys, or marketing communications— are only carried out with your explicit consent and you may revoke it at any time.
4. Data transfers
Your data may only be shared with: payment processing providers (MercadoPago or other authorized gateways), transactional messaging services (email, WhatsApp Business), and tax or judicial authorities when required by law.
We do not sell, rent, or transfer your data to third parties for commercial purposes.
5. ARCO rights
You have the right to Access, Rectify, Cancel, or Object (ARCO) to the processing of your personal data. To exercise these rights, send a request to elensuenovalledebravo@gmail.com with: your name, copy of official ID, clear description of your request, and supporting documents if applicable.
We respond within a maximum of 20 business days. Cancellation may take longer if there are pending tax obligations (e.g., retaining invoices for the legally required time).
6. Consent withdrawal
You may withdraw your consent at any time by writing to the email above. Some primary purposes —such as fulfilling tax obligations on a completed purchase— cannot be interrupted by legal mandate, and we will inform you clearly when this applies.
8. Changes to this notice
This notice may be updated when our practices, legal requirements, or services change. The last update date appears at the top of this document. We recommend reviewing it periodically.