Privacy notice

Victor Manuel Gutiérrez Barrientos, who does business as VG Tours, with its address at C. México y Mina 240, Mexicali, B.C., is responsible for the processing of your personal data.

Contact for any matter related to this notice: [email protected], WhatsApp +52 686 227 3807 or phone +52 686 246 0083.

Depending on what you request from us, we may collect:

• Identification and contact: name, phone number and email address.
• About your trip: the number of people in your reservation, the dates you vote for and the pickup point that works best for you.
• Payment:the receipt for your deposit or bank transfer. We don't store card numbers or banking passwords. If you pay with PayPal, PayPal processes the payment; we keep the transaction number and, if you pay by card without a PayPal account, the card brand and last 4 digits (never the full number).
• When the trip requires it: information you give us about health conditions, allergies, limited mobility or an emergency contact, so we can look after you safely during the trip.

Health data is sensitive data. We only collect it if you choose to share it, solely to look after your safety on the trip, and we don't use it for any other purpose.

Necessary purposes— without them we can't provide the service to you:

• Reserving and confirming your spot on a trip.
• Recording your date vote and letting you know when the trip is confirmed.
• Refunding your deposit if the trip doesn't reach the minimum group size, or if you decide to cancel under the published terms.
• Letting you know the pickup point and time, and any change to the trip.
• Taking care of you during the trip, including any emergency.
• Issuing your invoice, if you request one.

Additional purposes— these aren't necessary, and you can say no without it affecting your trip:

• Sending you the season calendar and new dates, only if you gave us permission (see “Updates list” below).
• Using photos or video from the trip on our social media and website. We always ask you first, and you can say no at any time.

To say no to the additional purposes, just send us a message on WhatsApp or by email. You don't have to give any explanation.

We don't sell or rent your data to anyone. We share it only when your own trip requires it or to send you what you asked for:

• Hotels, when the tour includes lodging: your name, to register the room.
• Restaurants and other providers on the itinerary: the number of people and, when applicable, your dietary restrictions.
• Authorities, when required by law, such as at checkpoints or federal highway inspections.
• Medical or emergency services, should it become necessary during the trip.
• PayPal, to process your payment when you choose to pay with PayPal.
• WhatsApp or the email servicewe use to send updates, only if you're on the updates list: your name and your phone number or email.

In every case, we share only the bare minimum. The ones for your trip are necessary to fulfill our contractual relationship with you and don't require your additional consent; the one for updates only happens if you gave us permission.

If you arrived through the link or QR code of someone who recommends us, your browser keeps a cookie called vg_ref with that code for 120 days. It's used to know who sent you: to give them their reward when you travel with us and to count, without your data, how many visits and contacts arrive with their code. It doesn't store your personal data or track you on other sites.

When you reserve, the “Who recommended us?”field is optional: you can change it or leave it blank. If you write someone else's name, we only use it to give them their reward. If the field isn't shown, the link's code is applied automatically; message us on WhatsApp and we'll remove it.

When you open a page with the code of someone who recommends us, we add one visit to that code's counter for the day. The counter doesn't store your IP address or any of your data. So the same visit isn't counted twice, your browser keeps a second cookie, vg_ref_dia, that lasts one day.

You can delete both cookies at any time from your browser settings (clear cookies for vgtours.net).

You're only added to this list if you ask: by filling out the “Notify me”form on our website (there the permission box is required, since that's all the form is for) or by checking the optionalbox on the reservation form, which starts unchecked and doesn't change your reservation in any way.

We keep your name, your email and/or phone number, the tours you're interested in, how many people, your comment if you write one, your language, the date you gave us permission and the wording of the box you accepted, and the code of whoever recommended us if you arrived through their link. We use it only to send you the calendar and new dates by WhatsApp or email, about once a month. The code of whoever recommended us is only used to count that you came through them; we never give them your data.

To leave the list, reply STOPto any message or write to us: we'll remove you within 10 business days at most. After that we keep only your name, your contact details, the date and wording of the permission you gave and the opt-out mark, so we don't contact you again, plus the code of whoever recommended us, only for their count; we delete the tours, the number of people and your comment. If someone enters your contact details on the form again, the opt-out stays until you confirm it with us. If you gave permission when reserving, your reservation stays the same. If you'd rather we delete your updates-list data, just ask.

To stop automated submissions, we keep a fingerprint of your connection that changes every day, can't be turned back into your IP address and is deleted after 48 hours. We don't store your IP address.

You can ask us at any time for Access to your data, its Rectification if it's incorrect, its Cancellationwhen it's no longer needed, or your Objection to our using it for a specific purpose.

Write to us at [email protected] or on WhatsApp at +52 686 227 3807, with your name, a detail that lets us identify your reservation, and what you'd like us to do. We'll reply within the following 20 business days.

You can also withdraw your consent the same way. Please keep in mind that if you withdraw the data we need for the trip, we won't be able to keep providing the service to you.

We keep your reservation data for as long as the trip lasts, and afterward for as long as tax and record-keeping obligations require. Any health data you share with us is deleted once the trip is over.

We keep updates-list data while you're on the list; if you opt out, only what's described under “Updates list.” The fingerprint of your connection is deleted after 48 hours. The per-code visit counter contains no personal data.

We store your information in systems with restricted access and encrypted backups. Access is limited to the people who run your trip. We will never ask you for passwords, PINs or full card details, on WhatsApp or by any other means.

If we change this notice, we'll post the new version on this same page and update the date at the top. If the change is significant, we'll let you know through the same channel you used to contact us.

If you believe your right to data protection has been violated, you may turn to the competent authority on personal data protection matters.