Privacy Policy — Casa Leah Puerto Escondido

Casa Leah Puerto Escondido is operated by The Mint Group S. de R.L. de C.V. (operating commercially as "Butik Stays"), a Mexican company with RFC MGR080225NZ4 and fiscal address at Bosque de Radiatas 18, 05120, Ciudad de México, CDMX. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (casaleah.co) or book a stay with us.

- Identification: full name, date of birth, nationality, identification document number - Contact: email, phone, address - Reservation: arrival/departure dates, number of guests, suite preference, special requests - Payment: processed via secure third parties (Stripe, Mercado Pago); we do not store full card data - Site usage: cookies, IP address, browser, pages visited, referral source (analytics)

- Managing reservations, check-in, check-out, and stay services - Communicating before, during, and after the stay - Sending marketing communications (with your prior consent — opt-out available at any time) - Improving our website and services - Complying with legal and tax obligations - Fraud prevention and security

- Reservation platforms: Guesty (current), Cloudbeds (incoming) - Payment processors: Stripe, Mercado Pago - Marketing platforms: Meta (Facebook Ads), Google Ads - CRM: GoHighLevel (HighLevel) - Analytics: Google Analytics - Tax and legal authorities when required by Mexican law

We use essential cookies for site functionality and optional cookies for analytics and advertising. You can manage cookie preferences in your browser.

You have the right to: Access, Rectification, Cancellation, and Opposition to the use of your personal data, as well as the right to limit and revoke consent. To exercise these rights, write to hello@casaleah.co indicating: your full name, contact email, the right you wish to exercise, and a copy of your ID.

EU visitors have additional rights: data portability, the right to be forgotten, and to lodge a complaint with their local data protection authority.

We retain personal data for as long as necessary to fulfill reservation, accounting (5 years for fiscal records per Mexican law), and legal obligations.

We implement reasonable physical, technical, and administrative safeguards to protect personal data. No transmission over the internet is 100% secure, but we work to maintain the highest standards.

We do not knowingly collect personal data from individuals under 18. Reservations require an adult age 18+. If you believe a minor has provided data without consent, contact us to delete it.

Some of our service providers operate outside Mexico. By using our services, you consent to international transfers, always under adequate safeguards.

We may update this policy. We will publish the changes here with the new "last updated" date.

For privacy questions: hello@casaleah.co / +52 954 488 7875.