Privacy Policy

Last updated 22 July 2026

This policy explains what personal information Casa Finch collects through this website, why, how it is protected, and the rights you have over it. We keep data collection to the minimum needed to answer your enquiry and run the site, and we never sell your information.

1. What we collect

When you use the contact form, we collect the details you provide — your name, email address, approximate dates, party size and message. When you browse, our host and analytics may process limited technical data such as your IP address, browser type, pages viewed and referring page. We do not process payment information on this site; bookings and payments are handled entirely by Airbnb under its own terms and privacy policy.

2. How we use it

We use your information only to reply to your enquiry and arrange your stay, to operate and secure the website, and — if you have given consent — to understand how the site is used so we can improve it. We do not use it for advertising and we do not sell or rent it to anyone.

3. Legal bases

Where the GDPR or similar laws apply, we rely on your consent for analytics cookies (which you can withdraw at any time), and on our legitimate interest in responding to enquiries and keeping the site secure. Submitting the contact form is your request for us to take steps at your direction.

4. Cookies & analytics

On your first visit we ask whether you accept analytics cookies. Nothing non-essential is set until you accept — analytics stay in a consent-denied state by default. If you accept, we may use privacy-respecting analytics to count visits and see which pages are useful. You can decline, and you can change your mind by clearing this site's data in your browser. Essential cookies needed for the site to function may be set without consent.

We use a small number of trusted processors: Cloudflare (website hosting and security), Resend (delivering the email your contact form generates), and, only with your consent, Google Analytics (site statistics). Bookings are made through Airbnb, which acts as an independent controller of the information you give it. Each processes data under its own agreement and only as needed to provide its service.

6. International transfers

Our providers may process data on servers outside your country, including in the United States. Where required, transfers rely on recognized safeguards such as the European Commission's Standard Contractual Clauses. The property and its management operate in Mexico.

7. How long we keep it

We keep enquiry messages only as long as needed to answer you and, if you become a guest, to arrange your stay — and then delete them within a reasonable period. Analytics data is retained in aggregate for a limited time. You can ask us to delete your information sooner at any point.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict the use of your personal data, to object to certain processing, and to withdraw consent. Under the GDPR (EU/UK), the CCPA/CPRA (California), the LGPD (Brazil) and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (your ARCO rights — access, rectification, cancellation and opposition), these rights are yours to exercise free of charge. California residents: we do not sell or share personal information as those terms are defined by law. To exercise any right, contact us below; we will respond within the time the applicable law requires. You may also complain to your local data protection authority — in Mexico, the INAI.

9. Children

This website is intended for adults planning travel. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

10. Security & changes

The site is served over HTTPS with modern security headers, and we limit who can access enquiry data. No method of transmission is perfectly secure, but we take reasonable steps to protect your information. We may update this policy; material changes will be reflected by the date at the top.

11. Contact

For any privacy question or to exercise a right, reach us through the contact page. We will get back to you personally.