Privacy Policy

Last updated: November 2026

This Privacy Policy explains how Garflo LLC collects, uses and protects your personal information when you visit www.cancunbay.com (in English, Portuguese, French or Italian) or book a tour with us.

1. Who we are

Garflo LLC ("Cancun Bay Tours", "we", "us")
3740 Colony Dr, Ste 244, San Antonio, Texas 78230, USA
EIN: 80-2378969

Privacy contact: info@cancunbay.com

Tours are operated by Cancun Bay Tours in Cancun and the Riviera Maya; we are not a reseller. Garflo LLC collects the payments made in U.S. dollars on www.cancunbay.com and issues invoices on request.

2. Information we collect

Information you give us when you book or contact us:

Full name
Email address
Phone number (including WhatsApp)
Country of residence
Hotel or pickup point
Number of people in your group
Ages of children, when children travel with you
Billing details, only if you ask for an invoice

Information collected automatically when you use the website: IP address, browser and device type, pages visited, the website or ad that brought you to us (for example, campaign parameters), and cookie identifiers. See Section 7.

Payment information. Payments are processed by PayPal, including debit and credit card payments made through PayPal. Card details are entered directly with PayPal. We do not receive or store your full card number or security code. We only receive a confirmation of the payment (amount, status and a transaction reference).

Sensitive information. We do not ask for sensitive information such as health data, government ID numbers or financial account numbers. Please do not send it to us. If you choose to tell us about a medical condition or special need so we can keep you safe on a tour, we use it only for that purpose.

3. How we use your information

To process and confirm your booking and send your confirmation and voucher.
To pick you up and operate the tour (our drivers and guides receive your name, group size and pickup point).
To contact you about your booking, changes, weather or cancellations.
To answer your questions by email, phone, WhatsApp or web chat.
To issue invoices when you request them.
To process refunds.
To prevent fraud and keep our website secure.
To comply with legal and tax obligations.
To measure how our website and advertising perform and to show you relevant ads (see Section 7). You can opt out of this at any time.
To send you offers by email or messaging, only if you agree. Every marketing message includes a way to unsubscribe.

4. Automated messaging assistant

When you write to us on WhatsApp or through the website chat, an automated assistant may answer first. It can give tour information, quote prices and help you book. A member of our team can take over at any time; just ask. The assistant does not make decisions that have legal or similarly significant effects on you.

5. Who we share your information with

We do not sell your personal information for money. We share it only with:

Payment processor: PayPal, to process payments and refunds.
Service providers that work on our behalf: website hosting, email, our customer messaging platform (GoHighLevel), and analytics and advertising tools (Google and Meta, see Section 7). They may use your information only to provide their service to us.
Authorities, when the law requires it or to protect our rights, our customers or the public.

Some of these providers store information in the United States, Mexico or other countries. When we transfer information across borders, we require the recipient to protect it in line with this policy.

6. How long we keep your information

We keep booking information for as long as needed to provide the service, handle claims and meet tax and accounting obligations, generally up to 5 years after your tour. Marketing data is kept until you unsubscribe. After that, we delete or anonymize it.

7. Cookies and tracking technologies

Cookies are small files stored by your browser. We use:

Tool	What it does
Essential cookies	Keep the website and the booking process working (for example, your language, currency and cart).
Google Analytics	Counts visits and shows us how people use the website, so we can improve it.
Google Ads	Measures which ads lead to bookings and lets Google show our ads to people who visited our website.
Meta Pixel (Facebook and Instagram)	Measures which ads lead to bookings and lets Meta show our ads to people who visited our website.
GoHighLevel	Runs the website chat and our messaging with customers, and links your conversation with your booking.

How to turn them off:

Your browser: block or delete cookies in your browser settings. Essential cookies are needed for booking.
Google Analytics: install the opt-out add-on at tools.google.com/dlpage/gaoptout.
Google ads: turn off personalized ads at myadcenter.google.com.
Meta ads: change your ad preferences at facebook.com/adpreferences.
Industry tool: optout.aboutads.info.

Turning off these cookies does not stop you from booking. You may still see ads, but they will be less relevant.

8. Your rights

You can ask us to:

Access the personal information we hold about you, and get a copy.
Correct information that is wrong or incomplete.
Delete your information, unless we must keep it by law (for example, for tax records).
Object to or limit certain uses, including marketing.
Opt out of targeted advertising and of any "sale" of personal information as defined by the Texas Data Privacy and Security Act.
Withdraw your consent at any time, without affecting what we did before.
Get a copy of your information in a portable format.

We handle your information under the laws of the State of Texas and, because our tours take place in Mexico, the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. We will not treat you differently for using your rights.

How to make a request:

Email info@cancunbay.com with the subject "Privacy request".
Tell us your name, the email or phone you used to book, and what you are asking for.
To protect your information, we will verify your identity by confirming details of your booking. We may ask for a copy of an ID only if we cannot verify you any other way. If someone acts on your behalf, we will ask for written proof of their authority.

Response time: we will confirm receipt within 10 business days and answer within 45 days. If we need more time, we will tell you why, and we may extend the period once by up to 45 more days.

Appeals: if we deny your request, you can appeal by replying to our answer with the subject "Privacy appeal". We will answer within 60 days. If you are still not satisfied, you may contact the Texas Attorney General.

9. Children

Our website is not directed to children under 13, and we do not knowingly collect information from them. When children join a tour, the adult who books gives us only their ages, which we need to price and operate the tour safely.

10. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS) and restricted access to booking data. No system is 100% secure. If a breach affects your information, we will notify you as required by law.

11. Changes to this policy

We may update this policy. We will publish the new version on this page with a new "Last updated" date. If the changes are significant, we will let you know on the website or by email.

12. Text messaging (SMS)

Mobile phone numbers and SMS opt-in consent will not be shared, sold or transferred to third parties or affiliates for marketing or promotional purposes. We use this information only to communicate with you about your inquiries and bookings. The SMS program is operated by Garflo LLC.

13. Contact

Privacy requests: info@cancunbay.com
Customer service: websales@cancunbay.com
Phone: USA/Canada +1 888 257 5547 · Mexico +52 984 242 0070
WhatsApp: +52 998 117 1390 · +52 998 110 5978
Mail: Garflo LLC, 3740 Colony Dr, Ste 244, San Antonio, Texas 78230, USA