1Information We Collect
We collect personal information in these ways:
- Email address — when you submit our newsletter form or contact form, we collect your email address along with any name and message content you provide.
- Cookies — small text files stored in your browser that remember your age verification status (30 days), your language preference (365 days) and your cookie choice (180 days), plus analytics cookies only if you accept them (see Cookies below).
- Server logs — basic technical data including IP address, browser type, and pages visited, retained for security and operational purposes.
- Event RSVPs — when you RSVP to a private event such as the Grand Opening, we collect what the form asks for: your name, email and phone, and your company if you give it; your guest's name and relationship, and their email and phone if you give them; shirt sizes, dinner choices and dietary needs; your travel dates, room type and, if you add them, your flights; the name and phone number of an emergency contact for each traveller, which we keep only to reach someone during the trip if we must; your confirmation that everyone in your party is 18 or older and that you accept the no-refund terms; and any notes or change requests you send us. With each RSVP we also record the IP address it came from, the approximate location that address suggests, and the browser used, for security.
- Event payments — when you pay for an event, PayPal (for PayPal and card payments) or your bank (for Zelle) handles the payment; we never receive your card or bank account details. We keep a record of each payment: the amount, date and method, PayPal's reference numbers and the name and email on the PayPal account, or the details our team records for a Zelle transfer.
2How We Use Your Information
We use the information you provide to communicate with you about Casa M'xuma — launch updates, product news, and replies to your inquiries — and, when you RSVP to an event, to arrange that event with you. We do not sell, rent, or trade your personal information.
For an event, we use your RSVP to confirm your place, take payment and send receipts; to send you what you need for the trip — a private reservation page, a calendar of the trip, payment and travel reminders, and messages from our team about the event; and to plan the trip with the hotel, the restaurant and the transport providers (see Data Sharing). These emails are about your booking: an RSVP doesn't sign you up for our newsletter.
Your RSVP comes with a private link to your reservation page, and a guest you bring may receive a link to their own trip page. Anyone with a link can open that page, so please keep it to yourself, and tell us if one has been shared by mistake.
We keep event RSVPs, travel details and emergency contacts for one year after the event and then delete them, except payment records, which we keep for as long as tax and accounting rules require.
Server logs are used for security monitoring, debugging, and to maintain the operation of the website. They are not used for advertising or shared with third parties for advertising purposes.
3Cookies
We use essential first-party cookies, and analytics cookies only if you accept them. We do not use advertising cookies or tracking pixels.
- Age verification cookie — stores your confirmed age status for 30 days so you are not asked again on return visits.
- Language preference cookie — stores your language choice (English or Spanish) for 365 days.
- Cookie choice — remembers whether you accepted or declined analytics cookies, for 180 days.
- Analytics cookies — set by Google Analytics only after you accept them in the cookie notice, to count visits; IP addresses are anonymized. If you decline, they are not set.
You can disable or delete these cookies in your browser settings. Doing so may require you to confirm your age each visit. You can change your analytics choice at any time from "Cookie preferences" at the foot of every page.
4Third-Party Services
Casa M'xuma does not use advertising networks or tracking pixels. We use these services from other companies, each under its own privacy policy:
- Google Analytics — counts visits to this website, only if you accept analytics cookies.
- hCaptcha — checks that our contact, inquiry and RSVP forms are sent by a person; it receives your IP address and information about your browser when the check runs.
- PayPal — processes event payments made by PayPal or card, and provides the payment buttons on your reservation page, which may set PayPal's own cookies.
- Vimeo — plays our film on the Grand Opening page. The player is set not to track you or set tracking cookies, but Vimeo receives your IP address and information about your browser when it loads.
When we begin using a third-party email service provider for newsletter delivery, we will update this policy and identify the provider here.
External links to retail partners or social platforms do not transmit your personal information from our site to those partners. Their own privacy practices apply once you click through.
5Data Sharing
We do not sell, rent, or trade your personal information. We may share information only:
- For an event you RSVP to, with the people who provide it, and only what each needs: the hotel (each traveller's name, contact details, dates, room and dietary needs), the restaurant (each guest's dishes and dietary needs), drivers or transport providers (names, phone numbers, flights and pickup times), and whoever makes the event's shirts or name badges (names and shirt sizes)
- With PayPal, to process an event payment you make
- When required by law, court order, or government request
- To protect the rights, property, or safety of M XUMA SPIRITS LLC, our employees, or others
- In connection with a business transfer or merger, in which case we will notify you in advance
6Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Opt out of marketing communications at any time
- Withdraw consent where applicable
To exercise any of these rights, write to us through the contact form on this website. We will respond within 30 days.
If you are a California resident, additional rights may apply under the California Consumer Privacy Act (CCPA). If you are in the European Economic Area, the General Data Protection Regulation (GDPR) may grant you additional rights including data portability and the right to lodge a complaint with a supervisory authority.
7Children
Casa M'xuma is intended for adults of legal drinking age in their jurisdiction (21 or older in the United States). We do not knowingly collect personal information from anyone under 21, with one exception: a private event held where the legal drinking age is 18 — such as the Grand Opening in Mexico — may include guests aged 18 to 20, and we collect their details only for that event. If we learn that we have collected information from anyone younger, we will delete it promptly.
8Data Security
We take reasonable measures to protect your personal information from loss, theft, misuse, and unauthorized access. No internet transmission is fully secure, however, and we cannot guarantee absolute security.
9Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top reflects when changes were made. Material changes will be communicated through this page; continued use of the website following any update constitutes acceptance of the revised policy.
