Integral Privacy Notice

TakeMe Exploring ("TakeMe Exploring," "we," "us," or "our"), with an address in Cancún, Quintana Roo, Mexico, is responsible for deciding how the personal data described in this Privacy Notice is collected, used, stored, shared, and otherwise processed.

Privacy contact:

This Privacy Notice applies to Travelers, Users, prospective customers, participants included in a Reservation, representatives of Operators, and other persons who interact with the TakeMe Exploring website, applications, customer-support channels, or related services.

TakeMe Exploring operates an online marketplace through which Travelers may discover and reserve tours, activities, attractions, transportation, and other travel-related services offered by independent Operators.

TakeMe Exploring processes personal data to operate the Platform, administer Reservations, collect payments, facilitate communication, provide customer support, prevent fraud, and connect Travelers with the Operator selected for the relevant Tour or Activity.

The selected Operator may process personal data as an independent data controller for the purpose of providing the reserved service. The Operator's processing may also be governed by its own privacy notice.

Depending on how a person uses the Platform, we may collect the following categories of personal data:

a. Identification and contact information

• full name;
• date of birth or age, when required for the reserved service;
• nationality;
• postal address;
• email address;
• telephone number;
• account username or credentials; and
• government-issued identification or passport information when required for a Reservation, security measure, refund, regulatory obligation, or by the Operator providing the service.

b. Reservation and travel information

• selected Tour, Activity, destination, date, time, and language;
• number, names, and ages of participants;
• hotel, accommodation, pickup, drop-off, or meeting-point information;
• flight, arrival, or departure information when necessary for the service;
• special requests;
• booking history;
• cancellation and refund information; and
• communications relating to the Reservation.

c. Payment, billing, and transaction information

• billing name and address;
• payment method and limited payment details;
• transaction amount, currency, payment status, and transaction identifiers;
• refund, chargeback, and fraud-prevention information; and
• tax or invoicing information.

Payments may be processed by independent payment-service providers. TakeMe Exploring does not intend to store complete payment-card numbers or security codes unless expressly stated and supported by appropriate security controls.

d. Account, communication, and customer-support information

• account preferences;
• emails, messages, call records, or chat communications;
• complaints, claims, refund requests, and supporting evidence;
• survey responses; and
• records of interactions with TakeMe Exploring or an Operator.

e. Reviews and User Content

• ratings, reviews, photographs, videos, comments, and other content voluntarily submitted through the Platform;
• the Reservation associated with a review; and
• information required to verify the authenticity of User Content.

f. Technical and usage information

• internet protocol address;
• browser, device, and operating-system information;
• device identifiers;
• language and approximate location;
• access dates and times;
• pages viewed, links selected, and Platform interactions;
• cookies, pixels, and similar technologies; and
• fraud, security, and diagnostic information.

g. Operator and business-contact information

For persons acting on behalf of an Operator, we may collect names, job titles, business contact details, identity-verification information, tax information, bank-account or settlement information, contracts, licenses, insurance documentation, and information necessary to manage the commercial relationship.

TakeMe Exploring does not seek to collect sensitive personal data unless it is reasonably necessary for a particular Tour, Activity, accessibility request, emergency, legal obligation, or safety requirement.

With the person's express consent where required, we may process limited information concerning:

• health conditions;
• disabilities, mobility, or accessibility needs;
• allergies or dietary requirements; or
• other information whose improper use could result in discrimination or create a serious risk to the person.

Travelers should provide only the sensitive information strictly necessary for the relevant service. When information concerns another participant, the person submitting it must be authorized to provide it and must make this Privacy Notice available to that participant.

TakeMe Exploring may process personal data for the following purposes that are necessary to provide the Platform and administer the relationship with the User:

• creating and managing User accounts;
• displaying, processing, confirming, modifying, and administering Reservations;
• identifying the Traveler and participants;
• communicating Reservation details to the selected Operator;
• enabling the Operator to provide the reserved Tour or Activity;
• collecting and processing payments;
• issuing confirmations, vouchers, receipts, and invoices;
• processing cancellations, refunds, complaints, chargebacks, and disputes;
• communicating service information, meeting instructions, schedule changes, reminders, and safety notices;
• providing customer support and mediating communications between Travelers and Operators;
• verifying reviews and maintaining the integrity of ratings and User Content;
• preventing and detecting fraud, abuse, security incidents, prohibited activity, and violations of the General Terms;
• protecting Users, Operators, TakeMe Exploring, and third parties;
• maintaining, troubleshooting, securing, analyzing, and improving the operation of the Platform;
• complying with tax, accounting, tourism, consumer-protection, payment, anti-fraud, and other legal obligations;
• responding to lawful requests from competent authorities;
• establishing, exercising, or defending legal claims; and
• maintaining records required for legal, contractual, security, or audit purposes.

If personal data required for these purposes is not provided, TakeMe Exploring may be unable to create an account, process a Reservation, collect payment, provide assistance, or complete another requested service.

Subject to the consent or other lawful basis required under applicable law, TakeMe Exploring may also process personal data for the following purposes:

• sending newsletters, promotions, destination inspiration, and personalized offers;
• conducting satisfaction surveys and market research;
• personalizing recommendations and advertising;
• creating customer segments and analyzing preferences;
• measuring marketing-campaign performance; and
• inviting Travelers to submit reviews or participate in promotional initiatives.

Refusing or withdrawing consent for these secondary purposes will not prevent the User from making Reservations or receiving the services already contracted.

A User may opt out of secondary purposes at any time by:

• selecting the unsubscribe option included in an electronic marketing communication;
• modifying the available account or cookie preferences; or
• contacting info@takemeexploring.com.

TakeMe Exploring processes personal data on the basis of consent, performance of a contractual or pre-contractual relationship, compliance with legal obligations, protection of legal rights and interests, fraud and security prevention, and other grounds permitted by applicable law.

Where express consent is required—particularly for certain financial, patrimonial, or sensitive personal data—TakeMe Exploring will request that consent through an appropriate physical or electronic mechanism.

Consent may be withdrawn at any time, subject to legal or contractual restrictions. Withdrawal will not have retroactive effect and may prevent TakeMe Exploring from continuing to provide a service that necessarily requires the affected data.

A User who provides personal data concerning another participant, family member, guest, or third party represents that the User is authorized to provide the information and, where required, has obtained the person's consent.

The User must inform that person about this Privacy Notice and the manner in which TakeMe Exploring and the selected Operator may process the information.

TakeMe Exploring may disclose or transfer personal data, as reasonably necessary for the purposes described in this Privacy Notice, to:

• the Operator selected by the Traveler;
• guides, transportation providers, attractions, venues, ticket providers, and other entities involved in delivering the reserved service;
• payment processors, banks, card networks, anti-fraud providers, and chargeback-management services;
• hosting, cloud-storage, communications, analytics, customer-support, identity-verification, cybersecurity, and other technology providers;
• professional advisers, auditors, insurers, and legal representatives;
• tax, consumer-protection, tourism, law-enforcement, judicial, administrative, and other competent authorities;
• a purchaser, investor, successor, or relevant adviser in connection with a merger, acquisition, restructuring, financing, or transfer of all or part of the business; and
• other recipients authorized by the data subject or permitted by applicable law.

Some recipients may be located outside Mexico or outside the data subject's country of residence. Where required, TakeMe Exploring will implement contractual, organizational, or other appropriate measures designed to protect personal data in connection with international transfers.

Service providers processing data solely on behalf of TakeMe Exploring must use the information only for authorized purposes and maintain appropriate confidentiality and security protections.

Where consent to a transfer is legally required, TakeMe Exploring will obtain it through the corresponding mechanism. Transfers necessary to perform a Reservation, fulfill a contract in the Traveler's interest, comply with a legal obligation, protect a legal right, or maintain the legal relationship may be conducted without additional consent where permitted by law.

TakeMe Exploring may use cookies, pixels, software-development kits, local storage, and similar technologies to:

• operate essential Platform functions;
• maintain sessions and language or currency preferences;
• remember User selections;
• measure traffic and performance;
• detect fraud and security incidents;
• understand how Users interact with the Platform;
• personalize content; and
• deliver or measure advertising, subject to applicable consent requirements.

Non-essential cookies will be used in accordance with the consent choices presented through the Platform. Users may manage available preferences through the cookie settings presented through the Platform and obtain further information by contacting info@takemeexploring.com.

Disabling certain cookies may affect the operation or availability of some Platform functions.

TakeMe Exploring will retain personal data only for as long as reasonably necessary to:

• complete and administer a Reservation;
• maintain the User's account;
• provide support;
• process payments, refunds, complaints, or disputes;
• comply with tax, accounting, consumer-protection, tourism, and other legal obligations;
• prevent fraud and maintain security; and
• establish, exercise, or defend legal claims.

Retention periods will depend on the nature of the information, the purposes for which it was collected, legal limitation periods, and applicable regulatory requirements.

When personal data is no longer necessary, it will be deleted, anonymized, or placed under restricted access or legal blocking, as appropriate. A cancellation request may not result in immediate deletion where continued retention is permitted or required by law.

TakeMe Exploring will maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal data, the risks involved, and available technology.

These safeguards are designed to protect personal data against loss, damage, alteration, destruction, unauthorized use, access, disclosure, or other unlawful processing.

No electronic system or transmission method can be guaranteed to be completely secure. If a security breach significantly affects a data subject's rights or interests, TakeMe Exploring will provide the notices required by applicable law.

Subject to applicable law, a data subject may exercise the following ARCO rights:

Access

Request confirmation of whether TakeMe Exploring processes the person's personal data and obtain access to that data and information concerning its processing.

Rectification

Request correction or updating of inaccurate, incomplete, or outdated personal data.

Cancellation

Request that personal data be removed from TakeMe Exploring's active records when it is no longer required or is being processed unlawfully, subject to applicable retention and blocking obligations.

Opposition

Object to certain processing where there is a legitimate reason relating to the person's particular circumstances or where otherwise permitted by law.

Depending on the law applicable to the data subject, the person may also have the right to:

• withdraw consent;
• limit the use or disclosure of personal data;
• opt out of direct marketing;
• request data portability, where applicable;
• object to or request review of certain automated decisions;
• lodge a complaint with a competent data-protection authority; and
• exercise other rights recognized in the person's jurisdiction.

Requests must be submitted to:

The request should include:

• the data subject's full name;
• an address, email address, or other means for receiving the response;
• documents reasonably sufficient to verify the identity of the data subject and, where applicable, the identity and authority of the representative;
• a clear description of the personal data concerned;
• the right being exercised and the action requested;
• for a rectification request, the requested correction and supporting documentation; and
• any information that may assist TakeMe Exploring in locating the relevant data or Reservation.

TakeMe Exploring may request additional information where reasonably necessary to verify identity, protect the data subject, understand the request, or locate the relevant data.

TakeMe Exploring will communicate its determination within 20 days after receiving a complete request. If the request is granted, it will be implemented within the following 15 days. These periods may be extended once for an equivalent period where justified by the circumstances and permitted by applicable law.

The exercise of ARCO rights is free of charge. TakeMe Exploring may recover only legally permitted reproduction, delivery, or duplication costs.

A request may be denied or granted only in part where permitted by applicable law, including where identity or authority has not been established, TakeMe Exploring does not possess the relevant data, the request would harm third-party rights, a legal impediment or competent-authority decision applies, or the requested action has already been completed. TakeMe Exploring will explain the basis for a full or partial denial.

A data subject may request the withdrawal of consent or limitation of the use or disclosure of personal data through the contact methods listed in Section 14.

The request should identify the processing the person wishes to stop or limit. TakeMe Exploring will process the request to the extent permitted by law and will explain any legal or contractual reason preventing full implementation.

Withdrawal of consent will not affect processing lawfully performed before the withdrawal and will not prevent processing that remains necessary to comply with legal obligations, administer an existing Reservation, resolve a dispute, or protect legal rights.

TakeMe Exploring may use automated tools to recommend Tours or Activities, personalize search results, detect fraud, assess transaction risk, prioritize customer-support requests, or identify potential violations of Platform rules.

TakeMe Exploring will not rely solely on automated processing to make a decision producing legal or similarly significant effects concerning a person unless permitted by applicable law and accompanied by appropriate safeguards.

Where applicable, a data subject may request information about relevant automated processing, express a point of view, or request human review through the contact methods listed in Section 14.

The Platform is not intended to be used independently by children who do not have the legal capacity to make a Reservation.

Personal data concerning a minor may be collected when an adult includes the minor as a participant in a Reservation or when the information is necessary for the relevant service. The adult providing the information must be the minor's parent, legal guardian, or another duly authorized person.

TakeMe Exploring will use information concerning minors only for the Reservation, safety, legal, and service-delivery purposes described in this Privacy Notice and will apply protections appropriate to the nature of the information.

Reviews, ratings, photographs, and other content submitted for public display may be visible to other Users, Operators, and members of the public.

Users must not publish personal data concerning another person unless they are authorized to do so. Public content may be moderated or removed in accordance with TakeMe Exploring's Review Moderation, Appeal and Removal Procedure.

Information required to verify a review may be retained separately from the public version of the review.

The Platform may contain links to websites, applications, maps, payment services, or other services operated by third parties.

TakeMe Exploring does not control the independent privacy practices of those third parties. Users should review the relevant third party's privacy notice before providing personal data directly to it.

A data subject who believes that TakeMe Exploring has not properly addressed a privacy request may contact TakeMe Exploring using the details in Section 14.

The person may also seek protection or submit a complaint before the competent Mexican data-protection authority, currently the Secretaría Anticorrupción y Buen Gobierno, or before another competent authority where applicable.

Information about the applicable procedure and current authority should be verified through the official Mexican government channels at the time the request is made.

TakeMe Exploring may update this Privacy Notice to reflect legal, regulatory, operational, technological, or commercial changes.

The current version and its effective date will be published at www.takemeexploring.com/privacy. Material changes may also be communicated through the Platform, by email, through the User's account, or by another appropriate method.

Where a change requires new consent under applicable law, TakeMe Exploring will request that consent before applying the relevant new processing.

This Privacy Notice may be made available in more than one language. Each version should communicate substantially the same information.

Questions, concerns, ARCO requests, consent-withdrawal requests, or complaints concerning this Privacy Notice may be sent to: