Legal

Privacy Policy

LAST UPDATED: AUGUST 21, 2026

This notice is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines. The Spanish version of this notice is the legally governing one.

1. Data controller

Mycelium Design and Construction, S. de R.L. de C.V., tax ID (RFC) MDC231117NR0, which operates the brand "El Máster Tulum Mantenimiento", with registered offices at Calle Itzamná, Mz 26, Local 92-B, Aldea Zama, C.P. 77760, Tulum, Quintana Roo, Mexico, is responsible for the use and protection of your personal data.

For anything related to this notice, write to info@mastertulum.com.

2. Data we collect

We only collect the data you give us when using this site:

  • Identification and contact data: full name, WhatsApp or phone number and, optionally, email address.
  • Property data: residential development, villa or unit number, and the date and time slot you pick for the first visit.
  • Request data: the plan you selected, your preferred payment method and the description of the work you ask us to quote.
  • Browsing data: IP address, device type, pages visited and campaign parameters (UTM) when you arrive from a QR code or an ad.

We do not collect sensitive personal data. We do not request financial or payment data through this site: while online payment is not enabled, any payment is arranged separately.

3. Purposes

Primary purposes, necessary to provide the service:

  • To handle and follow up on your plan or quote request.
  • To contact you by WhatsApp, phone or email to confirm availability, schedule and scope.
  • To schedule, perform and follow up on maintenance visits.
  • To issue invoices and keep administrative records of the service.
  • To handle clarifications, complaints or cancellation requests.

Secondary purposes, which are not necessary for the service and which you may decline:

  • Sending you communications about promotions, new services or seasonal reminders.
  • Producing internal statistics and measuring the effectiveness of our campaigns.

If you do not want your data used for secondary purposes, email info@mastertulum.com with the subject "Opt out of secondary purposes". Declining will never be a reason to deny you service.

4. Data transfers

We do not sell or trade your personal data. We share it only with providers that help us operate the site and the service, all bound by confidentiality obligations:

  • Vercel Inc. (United States) — website hosting.
  • Resend (United States) — delivering your request by email to our team.
  • Google LLC (United States) — Google Analytics and corporate email.
  • Meta Platforms Inc. (WhatsApp) — when the conversation continues on WhatsApp, which is currently our main confirmation channel.

We may also transfer your data when required by a competent authority or by law. Outside those cases, any transfer requires your consent.

5. Your ARCO rights

You have the right to know what personal data we hold about you, what we use it for and the terms of that use (Access); to request correction when it is outdated, inaccurate or incomplete (Rectification); to ask us to remove it from our records when you believe it is not being used in line with the law (Cancellation); and to object to its use for specific purposes (Opposition).

To exercise any of these rights, send your request to info@mastertulum.com including: (i) your name and a means to reply to you, (ii) a copy of official ID, (iii) a clear description of the data concerned and (iv) any document that helps us locate your records.

We will reply within 20 business days and, where applicable, act on it within the following 15 business days.

6. Withdrawing consent

You may withdraw your consent to the processing of your data at any time by writing to info@mastertulum.com. Note that withdrawal may not be immediate in some cases, and that we may need to keep certain information to meet legal or tax obligations.

7. Data retention

We keep your contact and service data for as long as a relationship with us exists and thereafter for the periods required by applicable tax and commercial rules. Requests that do not result in a contract are kept for up to 24 months for commercial follow-up.

8. Cookies and tracking

This site uses cookies and similar Google Analytics technologies to understand how the page is used and to measure campaign effectiveness. These cookies collect aggregate information (page views, time on site, device type, traffic source) and are not used to identify you personally.

You can disable cookies in your browser settings. Doing so does not prevent you from browsing the site or submitting a request.

9. Security measures

We maintain reasonable administrative, technical and physical measures to protect your personal data against damage, loss, alteration, destruction or unauthorised use, access or processing. The site runs over an encrypted connection (HTTPS) and access to requests is limited to the staff who need it to serve you.

10. Changes to this notice

This notice may change to reflect legal developments, changes in our internal practices or in the service. Any change will be published on this page, showing the date of the latest update. We recommend reviewing it periodically.

11. Supervisory authority

If you believe your right to personal data protection has been infringed, you may approach the competent personal data protection authority in Mexico.