PRIVACY POLICY
1. INTRODUCTION
At GALAXIAH, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect, and share personal information when you visit our website, contact us, request travel services, or make a booking.
This policy applies to our website, communications, vacation planning, concierge services, and related business activities.
We handle personal information in accordance with applicable Mexican data protection laws.
2. IDENTITY AND CONTACT INFORMATION OF THE RESPONSIBLE PARTY
The party responsible for processing your personal information is:
Legal Business Name: GALAXIAH WORLD
Trading Name: GALAXIAH
Registered Business Address: D48, Privada Kekchi, Privada Sacbe, SM 249, MZ 141, LT 1, 77518, Cancun, Mexico.
Email: hello@galaxiahworld.com
Website: https://galaxiahworld.com
Telephone: +52 998 236 7991
For questions about this Privacy Policy or the handling of your personal information, you may contact us using the details above.
3. PERSONAL INFORMATION WE COLLECT
Depending on how you interact with GALAXIAH, we may collect the following categories of personal information.
Identification and Contact Information
Full name
Email address
Telephone number
Country of residence, where provided
Travel and Booking Information
Destination and travel dates
Number of travelers
Names and relevant details of travelers when required for a booking
Accommodation, transportation, tour, and experience preferences
Children’s ages, where relevant to travel arrangements
Special requests and other information you choose to provide
Payment-Related Information
We may receive payment status, invoice references, transaction confirmations, and limited payment-related details needed to manage your booking. Card details are intended to be handled by the relevant payment provider rather than stored directly by GALAXIAH.
Technical Information
When you visit our website, certain technical information may be collected by the website platform or related technologies. This may include your IP address, browser type, device information, pages visited, and information about how you interact with the website, depending on the settings and tools enabled.
Sensitive Personal Information
We do not routinely request sensitive personal information. If you voluntarily provide information concerning your health or other sensitive matters that is necessary to arrange a requested travel service, we will handle it only where legally permitted and with the express written consent required by applicable law, unless a legal exception applies.
Please avoid sending sensitive information unless it is necessary for your request.
4. HOW WE USE YOUR PERSONAL INFORMATION
We use personal information for the following purposes.
Primary Purposes
Responding to inquiries and providing customer support.
Understanding your travel preferences and preparing personalized travel proposals.
Arranging accommodation, airport transfers, car hire, tours, excursions, celebrations, and other requested services.
Managing bookings, confirmations, changes, cancellations, and related communications.
Processing or verifying payments and managing invoices.
Communicating important information about your requested services.
Meeting applicable legal and contractual obligations.
Secondary Purposes
Sending promotional emails, WhatsApp messages, special offers, news, and updates about GALAXIAH.
Sharing information about upcoming group trips, seasonal travel opportunities, and new services.
Inviting you to participate in surveys or provide feedback about our services.
You may refuse or withdraw your consent for secondary purposes, including promotional communications, without affecting our ability to provide services you have requested. To opt out, contact us at hello@galaxiahworld.com or use the unsubscribe option provided in a promotional email or message, where available.
We will not use your personal information for purposes incompatible with those described in this Privacy Policy without taking the steps required by applicable law.
5. SHARING OF PERSONAL INFORMATION
We may share relevant personal information with third parties when necessary to provide the services you request. These may include:
Hotels, resorts, and apartment accommodation providers.
Airport transfer companies and car rental providers.
Tour operators, excursion providers, and event organizers.
Payment processors and financial service providers.
Website hosting, customer communication, and other technology providers supporting our business.
Professional advisers or authorities where disclosure is required by law.
We share only information reasonably necessary for the relevant purpose. Third-party providers may process information under their own privacy policies and applicable legal obligations.
We do not sell your personal information.
6. INTERNATIONAL PROCESSING AND TRANSFERS
Because GALAXIAH serves international clients and may work with service providers located in different countries, your personal information may be processed or transferred outside Mexico.
Where this occurs, we will take the steps required by applicable law and ensure that information is handled for the purposes described in this Privacy Policy.
Some third-party providers may have their own international data processing arrangements and privacy practices.
7. PAYMENT INFORMATION
Payments for GALAXIAH services may be processed through third-party payment providers.
When you make a payment, the payment provider may collect and process information such as your payment card details, billing information, and transaction details under its own privacy policy and security procedures.
GALAXIAH may receive payment confirmations, transaction references, invoice numbers, and other information needed to reconcile payments and manage your booking.
We do not intend to store full payment card numbers or security codes on our own systems.
8. COOKIES AND WEBSITE TECHNOLOGIES
Our website is hosted on Squarespace, which uses cookies and similar technologies to support website functionality, security, and performance.
These may include:
Essential Cookies: Help the website operate securely and remember certain preferences.
Analytics and Performance Cookies: Help us understand how visitors use the website, such as which pages they visit and how they interact with the site.
Third-Party Cookies: May be used by integrations or services added to the website, depending on the features enabled.
Squarespace analytics and performance cookies may be enabled by default, but can be disabled through the website's available settings. We may also use other third-party tools in the future, which may have their own cookie and privacy practices.
You can manage cookies through your browser settings and any cookie preference tools made available on our website. Disabling certain cookies may affect website functionality.
For more information about cookies used by Squarespace, please consult its official help documentation:
https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses
9. PROTECTION OF PERSONAL INFORMATION
We take reasonable administrative, technical, and physical measures designed to protect personal information against loss, unauthorized access, misuse, alteration, or disclosure.
Access to personal information is limited to people and service providers who need it for legitimate business purposes and are subject to appropriate confidentiality obligations.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
If a security incident occurs that significantly affects your rights or interests, we will provide any notification required by applicable law.
10. RETENTION OF PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing services, managing bookings, resolving disputes, and meeting legal or contractual obligations.
When information is no longer necessary, it will be deleted, securely destroyed, or blocked and retained only where required or permitted by applicable law.
Retention periods may vary depending on the type of information and the purpose for which it was collected.
11. YOUR PRIVACY RIGHTS (ARCO RIGHTS)
Under applicable Mexican data protection law, you may exercise the following rights, subject to legal requirements and exceptions:
Access: Request information about the personal data we hold about you and how it is being processed.
Rectification: Request correction of inaccurate, incomplete, or outdated information.
Cancellation: Request deletion of your personal information where legally appropriate.
Opposition: Object to the processing of your personal information in circumstances permitted by law.
To exercise these rights, please email hello@galaxiahworld.com with the subject line “Privacy Rights Request.”
Please include your name, a way for us to contact you, a description of your request, and information that helps us locate the relevant records. We may request reasonable documentation to verify your identity or the authority of a representative.
We will respond within the time limits established by applicable law. Under the current Mexican law, the general period for communicating our decision is 20 business days, which may be extended once by up to 10 business days when legally justified. If the request is approved, we will generally have up to 15 additional business days to carry it out.
There may be legal circumstances in which we cannot fulfill a request in full. If so, we will explain the applicable reason.
12. LIMITING THE USE OR DISCLOSURE OF YOUR INFORMATION
You may request that GALAXIAH limit the use or disclosure of your personal information, where applicable.
If you no longer wish to receive promotional communications, you may request to unsubscribe by contacting us at hello@galaxiahworld.com.
You may also use any unsubscribe option provided in a promotional message, where available.
Requests to stop promotional communications will not prevent us from sending essential messages relating to bookings, payments, or services you have requested.
13. CHILDREN’S PRIVACY
GALAXIAH may collect limited information about children when necessary to arrange family travel or services, such as a child’s age for accommodation, transportation, or activity requirements.
Where personal information about a child is provided, we expect it to be submitted by a parent or legal guardian who is authorized to provide it.
We do not knowingly seek to collect unnecessary personal information about children. If you believe a child’s information has been provided to us improperly, please contact us so we can review the matter.
14. THIRD-PARTY WEBSITES AND SERVICES
Our website or communications may contain links to third-party websites, booking platforms, payment providers, or social media services.
These third parties operate under their own privacy policies and terms. GALAXIAH is not responsible for the privacy practices of websites or services that we do not control.
We encourage you to review the privacy policies of third-party providers before submitting personal information to them.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, or applicable legal requirements.
Any updated version will be published on our website, together with its revised date. Where required by law, we will communicate material changes through appropriate means.
16. CONTACT INFORMATION
If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:
GALAXIAH
Legal Business Name: GALAXIAH WORLD
Registered Business Address: D48, Privada Kekchi, Privada Sacbe, SM 249, MZ 141, LT 1, 77518, Cancun, Mexico. Email: hello@galaxiahworld.com
Website: https://galaxiahworld.com
Telephone: +52 998 236 7991
Effective Date: 29th September, 2026