Privacy Policy

Last updated 27 September 2026

The short version

There is no advertising on this site, and nothing here follows you around the internet. You can pay by card, but the payment happens on Stripe’s own page — your card number never touches this website and we never see it.

We do count visits, because otherwise we have no idea whether this site is working. That counting is anonymous: it sets no cookie, stores nothing on your device, and never records your name, your email or your IP address. We cannot tell one visitor from another, and we could not identify you from it if we tried.

There is one exception, and we would rather say it first than bury it: WhatsApp. The WhatsApp button on this site is a plain link — it loads nothing from WhatsApp and sets no cookie. But if you tap it and write to us, the conversation happens in WhatsApp, which is owned by Meta. We see your phone number, your WhatsApp name and profile, and your messages. We use the WhatsApp Business app: your messages are end-to-end encrypted, travel through WhatsApp’s servers outside Mexico without WhatsApp being able to read them, and are kept on our business phone.

So: no ads, no accounts, no newsletter, and nothing that can recognise you on somebody else’s website. When you book, the payment page asks for your phone number, so we can message you on WhatsApp about your excursion. And if you message us on WhatsApp, you have started a conversation that is saved, and it comes with your phone number. Everything below explains that in more detail.

What happens when you tap a booking button

A booking button takes you to our booking form and then to Stripe’s payment page, described under Payment below. The WhatsApp button opens WhatsApp with our number, +52 987 119 7796. Nothing about you is sent until you type a message and press send yourself. We do add one to a tally of how many people tapped that particular button — that records the button, not you.

WhatsApp is not built by us, and this site does not load it. The WhatsApp button is an ordinary link: when a page loads, nothing is fetched from WhatsApp and no cookie or identifier is placed in your browser. Only when you tap it does your phone or browser open WhatsApp, and from there you are in WhatsApp’s own app or website.

If our payment page cannot be opened for any reason, the booking button offers WhatsApp instead, with the excursion, date, pickup time and number of passengers already written out. Nothing is sent until you press send. If you would rather not use WhatsApp, write to hello@visitcozumel.com.mx. In that case your message travels by ordinary email and WhatsApp is not involved.

WhatsApp, where we answer you

WhatsApp is where our team answers you. It is owned by Meta, a US company, and the conversation happens inside WhatsApp, not on this website. When you write to us there:

• We see your phone number — WhatsApp always shows it to us.
• We see your WhatsApp name and profile, as your WhatsApp settings show them.
• We see everything you send, and everything we reply — including your name or email address, if you give them to us there.
• Your messages are end-to-end encrypted. They travel through WhatsApp’s servers outside Mexico, but WhatsApp cannot read them, and they are kept on our business phone.

We do not sell or share your conversation. What WhatsApp itself does with information is set out in WhatsApp’s own privacy policy.

It is the same small team behind our sister businesses, Tierra Maya and Cozumel Island Transfers, so the person who replies to you may be the person who would have replied under one of those names.

What we count, and why

We are a small family company and this website is new. Without counting we cannot tell the difference between nobody visiting and everybody leaving — and those two problems have opposite answers. So we count five things, and only these five:

• that a page was opened;
• that somebody scrolled as far as the excursion prices;
• that somebody opened one of the frequently-asked questions;
• that somebody tapped a booking button, and which excursion it was for;
• roughly where in the world the visit came from, and which website sent it — country level only, never a street or a person.

Each of those is a number going up by one. There is no profile, no history, and nothing joining one visit to the next. We use two services for it: Cloudflare Web Analytics, which is built specifically not to use cookies or fingerprinting, and a simple counter of our own that writes to a private spreadsheet we keep. Neither one stores anything on your device, and neither can follow you off this site.

The one thing that is genuinely different is WhatsApp, and we said so at the top: it sets no cookie here, but a conversation you start with us there is saved, and it comes with your phone number.

If you would rather not be counted at all

Add ?novc=1 to the end of the web address — www.visitcozumel.com.mx/?novc=1 — and our own counter ignores that visit completely. If your browser has a “do not track” or blocking setting turned on, or an ad blocker, our counter will usually not run at all, and the site works exactly the same without it.

To keep WhatsApp out of it as well, simply do not tap the WhatsApp button, and write to us at hello@visitcozumel.com.mx instead. You can read every page on this site without ever opening WhatsApp.

What we hold once you message us

Once you are talking to us, we keep what we need to actually run your excursion:

• The conversation itself — on WhatsApp, with your phone number, or by email — and whatever contact details you gave us in it.
• Your name, or the name the booking is under.
• Your ship and your date in Cozumel.
• How many people are in your group.
• Where we are picking you up — the cruise pier, or your hotel if you are staying on the island.
• Anything else you choose to tell us so the day goes well.

You never have to give us health or accessibility information. Some guests do, because it helps us plan the right vehicle and the right stops. If you would rather not put it in writing, tell the guide on the day.

Why we hold it

Only to arrange and run the excursion you booked, and to reach you if something changes — your ship docks late, the weather turns, or we need to confirm a pickup. We do not sell your information. We do not share it with advertisers. We do not add you to a mailing list.

Who can see it

Inside our company, only the people who need it to run your day: whoever answers your messages and arranges your excursion, and the driver-guide who collects you.

Outside our company, WhatsApp carries the conversation, because that is where it happens. Anyone else is a separate question, and we will not guess at the answer.

Photos

Guides and guests take photos on excursions. We have not written down what we do with them, so we are not going to claim anything here yet.

Payment

When you book, you are taken to a payment page run by Stripe (Stripe, Inc.). You pay the full price by card: priced in US dollars, charged in Mexican pesos at 18 pesos per US dollar.

We never see your card number, and this website never stores it. Your card details go straight to Stripe. What comes back to us is your name, your email address, your phone number, the amount you paid and a reference number — enough to run your excursion and nothing more.

Stripe keeps its own record of the payment, as any payment company must, and handles it under its own privacy policy. Stripe is in the United States.

We also ask which cruise ship you are sailing on so we know where and when to meet you. The payment page asks for your phone number so we can message you on WhatsApp about your excursion, such as your guide’s name and photo the day before. Please never send a card number on WhatsApp — you will never need to, and we would only ask you to use the payment page.

How long we keep it

We keep your booking details while we are arranging and running your excursion, afterwards for as long as we might need them if something comes up, and for as long as a Mexican company is required to keep its accounting and tax records.

Hosting

Somebody has to serve these pages to your browser. Like every website on the internet, our web host's servers see standard request information when a page loads — the page you asked for, your browser type, and your IP address. That is how the web works; a page cannot reach you without it.

This site is served by Netlify (Netlify, Inc.), and its web address is managed by Cloudflare (Cloudflare, Inc.). Both are in the United States. We do not use their server logs to build any picture of you; the anonymous counting described above is the only measurement we actually look at.

Children

This site is not aimed at children and we do not knowingly collect information from them. Children travel with us, of course, but we only ever hold their details because a parent or guardian gave them to us as part of a booking.

Your rights

You can ask us to:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete what we hold, once we no longer need it for your excursion or for our tax records.
• Stop using it for anything you did not ask for.

Ask us in the same WhatsApp chat, or write to hello@visitcozumel.com.mx, and we will tell you what we hold and act on your request.

Changes to this policy

If we change how any of this works, we will update this page and change the date at the top. There is no mailing list to notify, because we do not have one.