Legal

Privacy Policy

Last updated September 2026

Xaymaca handles your personal information with the discretion expected of a private concierge. This policy explains what we collect, why we collect it, and how we keep it safe.

1. What we collect

To arrange your experiences, we collect the details you provide at checkout or in a concierge request: your name, email, phone number, party size, villa address, and any preferences or notes you share.

We also keep a record of your bookings, payments, and saved itineraries so we can manage and personalise your trip.

2. How we use it

We use your information to confirm bookings, coordinate with local providers and guides, send booking updates and excursion reminders, and respond to concierge requests.

We may also use aggregate, non-identifying information to improve our service and the experiences we curate.

3. Sharing

We share only the details necessary to deliver your experience — for example, your pickup time and villa address with the assigned driver or guide. Providers are expected to handle your information with the same care we do.

We never sell your personal information to third parties.

4. Communications

You will always receive booking confirmations and status updates by email. Optional coordination by WhatsApp can be enabled in your profile and turned off at any time.

Price-drop and availability alerts can be managed in your account or unsubscribed via the link in any alert email.

5. Data retention

We retain your booking records for as long as needed to provide the service and to respond to any post-trip enquiries. You may request deletion of your account and associated data at any time by contacting our concierge.

6. Security

We take reasonable measures to protect your information, including secure storage and restricted access. Payment card details are handled by our payment provider and are never stored by Xaymaca.