What this notice covers
This notice explains how personal data is handled through this website, the digital guidance application and enquiries about stays, classes, spa, retreats and business services sent to Pachamaya by email or WhatsApp.
Services requiring other data or purposes will have the relevant information and consent arrangements before that data is collected. The future digital library and online payments are not yet enabled on this website.
What data we receive
- Contact: name, email address and, when contacting us on WhatsApp, your phone number and any information you choose to share in the conversation.
- Application: city and time zone, preferred start date, availability, goals, motivations and interest in an additional stay.
- Financial support, only if requested: reasons, the value of the programme to you, proposed voluntary contribution and currency. This information may reveal aspects of your financial circumstances.
- Browsing: hosting and external tool providers may receive your IP address, browser and device details and technical information needed to operate their services.
The form does not request diagnoses, medical records, mental health information, bank statements, card numbers or passwords. Describe your goals and needs in general terms and avoid including other people’s data.
How we use your data
To answer enquiries, review applications, agree availability, prepare a proposal or guidance plan and follow up on the services you request. If you request financial support, Fernando Castilla will review the information to assess your application and proposed contribution; this is not an automated assessment.
Submitting an application does not subscribe you to advertising. We will not use this data for campaigns unrelated to your request without the appropriate consent. Financial support is optional; if you do not authorise processing of financial information, you can apply at the regular programme price.
Tools and service providers
The form is processed through FormSubmit and delivered to fernando.castilla@pachamaya.com. FormSubmit may request an anti-spam check. Hosting and email providers help display the website and deliver or store communications.
Hosting currently uses OpenAI Sites. The embedded map uses Google Maps and may transmit technical information to Google when it loads. Opening WhatsApp takes you to an external service. See the policies of OpenAI, Google and WhatsApp.
These providers may process information outside Mexico. Their role as service providers is distinct from transferring data to a third party for its own purposes. Pachamaya does not sell your data; transfers requiring consent will be explained and consent requested beforehand, except where an applicable legal exception permits them.
Your rights and how to exercise them
You may request access, rectification, cancellation or objection to the processing of your data (ARCO rights under Mexican law), withdraw consent or limit its use or disclosure by emailing admin@pachamaya.com with the subject “Privacy”.
Include your name, a way to reply, the right you wish to exercise and the data concerned. For corrections, specify the change and supporting information. We will explain how to verify your identity or representation; do not send identity documents through the guidance application form.
We will communicate a decision within 20 business days of receiving a complete request; if approved, it will be implemented within the following 15 business days. Each period may be extended once for an equal period where legally justified. Replies and, where applicable, access may be provided electronically after identity verification.
Withdrawal does not apply retrospectively and may prevent us from continuing services that require that data. Some legal obligations may require retention. If a request cannot be granted, we will explain why.
Retention and access
We will retain information for the time needed to handle your request, provide agreed services and meet applicable legal obligations. It will then be blocked and deleted in accordance with those obligations. Access must be limited to personnel who need the information for these purposes and providers involved in the service. You can enquire about your data or request cancellation through the privacy contact.
Changes to this notice
Updates will be published on this page with the version date. Changes requiring renewed consent will be communicated before the corresponding processing takes place. This notice addresses processing under Mexican legislation on personal data held by private parties.