Legal
Privacy Policy
Last updated September 2026
Xaymaca handles your personal information with the discretion expected of a private concierge. This policy explains what we collect, why we collect it, and how we keep it safe.
1. What we collect
To arrange your experiences, we collect the details you provide at checkout or in a concierge request: your name, email, phone number, party size, villa address, and any preferences or notes you share.
We also keep a record of your bookings, payments, and saved itineraries so we can manage and personalise your trip.
2. How we use it
We use your information to confirm bookings, coordinate with local providers and guides, send booking updates and excursion reminders, and respond to concierge requests.
We may also use aggregate, non-identifying information to improve our service and the experiences we curate.
3. Sharing
We share only the details necessary to deliver your experience — for example, your pickup time and villa address with the assigned driver or guide. Providers are expected to handle your information with the same care we do.
We never sell your personal information to third parties.
4. Communications
You will always receive booking confirmations and status updates by email. Optional coordination by WhatsApp can be enabled in your profile and turned off at any time.
Price-drop and availability alerts can be managed in your account or unsubscribed via the link in any alert email.
5. Data retention
We retain your booking records for as long as needed to provide the service and to respond to any post-trip enquiries. You may request deletion of your account and associated data at any time by contacting our concierge.
6. Security
We take reasonable measures to protect your information, including secure storage and restricted access. Payment card details are handled by our payment provider and are never stored by Xaymaca.