PRIVACY NOTICE
SUNSET PLAZA BEACH RESORT & SPA | ONLINE STORE
1. Who We Are and How to Contact Us
INMOMILIARIA ZIG, S.A. de C.V., the entity responsible for Sunset Plaza Beach Resort & Spa, with registered address at Diego Rivera 121, Zona Hotelera, Las Glorias, ZIP 48330, Puerto Vallarta, Jalisco, Mexico, is responsible for processing the personal data used in its online store: https://store.hotelsunsetplaza.com/.
For questions regarding this notice or the processing of your data, please email hello@hotelsunsetplaza.com.
2. Data We Collect and Its Source
We may use information from the guest’s reservation obtained from the hotel’s reservation or customer relationship management systems, including name, email address, reservation number, dates of stay, and preferred language. This information allows us to send communications from the hotel and provide personalized access to the store via a link, without the need to create an account.
We also receive the data that guests provide on the forms for each product or service: names of the recipients, dates, times, contact information, preferences, special instructions, and comments necessary to fulfill the request. For example, the date and message for a birthday cake or the requested time for a spa service.
We ask that you provide only information relevant to the service and avoid including unnecessary information about other people. When you provide information about another person, you must have the appropriate authorization.
3. Sensitive Personal Information
Comments or forms for certain services may contain information about allergies, injuries, health conditions, or other special needs. This information constitutes sensitive personal data and should only be provided when necessary to evaluate, coordinate, or adapt the requested service.
Processing this information requires the data subject’s express, written consent through an appropriate authentication mechanism, except where otherwise provided by applicable law. The publication of this notice, browsing the store, or accepting the terms of purchase does not constitute such specific consent.
4. How We Use the Information
The necessary purposes are to identify the guest, personalize their in-store experience, record the requested services, communicate the necessary details to the responsible departments, coordinate the provision of services, send confirmations, respond to inquiries, and comply with applicable legal obligations.
As an additional purpose, we may send promotions, offers, and marketing communications when we have the appropriate consent. The guest may opt out of this use or request to be removed from the mailing list by writing to hello@hotelsunsetplaza.com, without affecting the contracted services. Communications necessary to process a purchase or service are distinct from promotional communications.
5. Electronic Payments
Payments are processed through Stripe, where the guest directly enters their payment information. The hotel does not request or store full credit card details on the product or service forms in its online store. Do not send full card numbers or security codes via email or in comment fields.
Stripe’s processing of information is described in its privacy notice. Stripe’s involvement does not relieve the hotel of its responsibilities regarding the data it processes.
6. With Whom We May Share Information
The relevant departments within the hotel may access the information necessary to provide the requested services. When the service is provided by an external vendor, such as a tour or transportation operator, we may share the necessary data with them to coordinate and deliver the service.
Access by providers processing information on behalf of the hotel must be limited to authorized instructions and purposes. Transfers to third parties, whether within or outside Mexico, must comply with applicable regulations and obtain the data subject’s consent when required. Information may also be provided to comply with valid requests from competent authorities.
7. Cookies and Third-Party Content
The store may use cookies and similar technologies for functions such as maintaining your shopping session, remembering your cart, and saving your preferences. You can view and manage cookies through your browser settings; blocking necessary cookies may affect the store’s functionality.
If analytics, advertising, or other non-essential technologies are used, their providers, purposes, and duration must be disclosed, and consent must be obtained where applicable. This notice does not in itself constitute authorization to install tracking technologies.
If a page includes videos, maps, or other third-party content, loading that content may allow the provider to receive technical information or use cookies in accordance with its settings. Links to external sites lead to services with their own privacy notices.
8. Security and Retention
Personal data must be protected through administrative, technical, and physical measures appropriate to its nature and the risks associated with its processing, with access limited to those who need it to fulfill the stated purposes.
The information will be retained for as long as necessary to provide services, resolve inquiries, and comply with applicable legal obligations and liability periods. Once these periods have expired, the data will be deleted, blocked, or anonymized, as appropriate. Sensitive data must not be retained for longer than is necessary for its intended purpose.
9. Your Rights and How to Exercise Them
You may exercise your rights of access, rectification, erasure, and objection (ARCO), request the revocation of your consent, or limit the use and disclosure of your data by writing to hello@hotelsunsetplaza.com.
Please include your name, a way to receive a response, and a clear description of your request and the data involved. You will be instructed on how to properly verify your identity or representation and, if you request a correction, what evidence is required to support it. Do not include unnecessary sensitive information in your initial message.
Requests will be addressed in accordance with the requirements and timeframes set forth in applicable Mexican law. Deletion or revocation may be limited by legal retention obligations and will not have retroactive effect. If the processing is essential for a pending service, you will be informed of the consequences of your request.
10. Changes to This Notice
Updates will be posted on this page, accessible at https://store.hotelsunsetplaza.com/, with the date indicated. When a change requires additional information from the data subject or new consent, those requirements will be met prior to the corresponding processing.
Last updated: October 12, 2026.