How we handle your personal data.

Data controller

Maya Xel ("we", "us"), located at Andador Kanbul, Manzana 12 Lote 65, 77760 Tulum, Quintana Roo, Mexico, is responsible for processing your personal data in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

Personal data we collect

Through our reservation form we collect: name, email address, reservation date, number of guests and, optionally, an additional message. If you join the Maya Xel Club we also collect the data described in the "Maya Xel Club" section below.

Purposes of processing reservations

• To manage and confirm your reservation request.
• To contact you by email or WhatsApp regarding your visit.

We do not use your reservation data for marketing, advertising or commercial prospecting, nor do we share it with third parties for those purposes.

Maya Xel Club (loyalty program)

If you join the Maya Xel Club, on our page mayaxelcafe.com/club or at the counter, we collect: name, WhatsApp number and, optionally, email address and the day and month of your birthday. While you are a member we also record the visits and purchases linked to your card (date, amount, products, stamps, rewards and discounts applied) and your preferred language.

Necessary purposes to provide the service you request:

• To create and manage your membership and your digital card with a QR code.
• To identify you at the counter, add your stamps and apply your rewards, levels and discounts (free drink, welcome offer, birthday).
• To answer your questions about your stamps and rewards.

Secondary purposes (not required for the Club): sending you WhatsApp or email messages about available rewards, your birthday and Maya Xel promotions, and preparing internal statistics on how the program is used. If you do not want these messages, you can tell us at any time by replying "STOP" to our message or by writing to the email address below; your membership and stamps will not be affected.

We keep Club data while your membership is active. You can leave instantly yourself with the “Leave the Club” button on your card (from the phone you signed up with) or ask us by email. When you leave, we delete your Club data and the receipts of your purchases are kept without information that identifies you, for accounting and tax obligations. If you are under 18, you need the consent of your parent or guardian to join.

The Club page stores your card identifier in your browser (local storage) so it can show your card without asking for your number again; you can remove it with "Not me / sign out" or by clearing your browser data.

Data transfers

To process the reservation form we use Formspree (Formspree, Inc., based in the United States) as a data processor; your data is transmitted through their platform solely to deliver your request to our email. Maya Xel Club and point-of-sale data are stored on Google cloud services (Firebase, by Google LLC, whose servers may be located outside Mexico), acting as a data processor. When we contact you via WhatsApp, the message is transmitted through the WhatsApp platform (Meta Platforms, Inc.). We do not sell or share your data with third parties for unrelated purposes.

Cookies and similar technologies

Our site uses an embedded Google Maps and Google Fonts, which may generate requests to Google's servers and, in the case of the map, Google's own cookies when you interact with it. We do not use our own tracking or analytics cookies.

Your rights

Under Mexican law you have the right to access, rectify, cancel, or object (ARCO rights) to the processing of your personal data, and to withdraw your consent, by writing to mayaxelcafetulum@gmail.com with your name and request. We will respond within a maximum of 20 business days, as required by the LFPDPPP.

Changes to this notice

Any changes to this privacy notice will be published on this same page.

Last updated: October 16, 2026.