Privacy Policy, Villa 1
Last updated: November 13, 2025
Welcome to Villa 1 (“Villa 1”, “we”, “us”, or “our”). We respect your privacy and are committed to protecting the personal information you share with us when you visit our website villa1.com (the “Site”) or book a stay with us.
This Privacy Policy explains how we collect, use, disclose, and protect your information. By using the Site or booking with us, you agree to the practices described here.
1. Who We Are and Scope of This Policy
This Privacy Policy applies to:
- Visitors to villa1.com
- Guests and potential guests who contact us, request a quote, or book a stay
- People who interact with us via email, phone, messaging apps, or social media (in connection with Villa 1)
Controller / Owner:
Villa 1
Paseo de La Marina 4732, Col. El Medano
Cabo San Lucas, B.C.S. 23543
281-789-2226
If you access our property listing through a third-party platform (for example, Vrbo, Airbnb, Booking.com, etc.), that platform is also a controller of your data for information collected through their site. Their privacy policy applies in addition to this one.
2. Information We Collect
We collect information in three main ways:
- Information you provide directly
- Information collected automatically when you use the Site
- Information received from third parties (like booking platforms or payment providers)
2.1 Information You Provide Directly
When you interact with us, you may provide:
- Contact details: name, email address, phone number, country of residence
- Booking details: dates of stay, number of guests, names of guests, special requests
- Payment-related information: We do not typically store full card numbers ourselves. Payments may be processed via third-party providers (e.g., Square, PayPal or your bank’s payment gateway) who may collect card details directly.
- Communication content: messages, emails, inquiries, reviews, and feedback
- Optional information: Preferences (e.g., bed configuration, allergies, special occasions) Travel details (flight arrival time, transportation requests)
2.2 Information We Collect Automatically
When you visit the Site, we may automatically collect:
- Technical data: IP address Browser type and version Device type and operating system Referring and exit pages Time zone and approximate location (based on IP)
- Usage data: Pages visited Links clicked Time spent on pages Search queries on the Site
This is mainly collected via cookies and similar technologies (see Section 5).
2.3 Information from Third Parties
We may receive information about you from:
- Booking platforms (e.g., Vrbo, Airbnb, travel agencies)
- Payment providers and banks
- Marketing or analytics tools, if used (e.g., Google Analytics, Meta Ads)
These third parties have their own privacy policies. We only receive the information needed to manage your booking, payment, or communication.
3. How We Use Your Information and Legal Bases
We use your information for the following purposes:
3.1 To Provide and Manage Your Booking
- Process your reservation and payments
- Communicate with you about your booking (confirmations, check-in details, instructions, etc.)
- Manage changes or cancellations
- Provide on-site support and guest services
Legal basis (where applicable):
- Performance of a contract (to provide the stay you booked)
- Legitimate interests (efficient management of bookings and guest needs)
3.2 To Communicate With You
- Respond to inquiries and quote requests
- Send pre-arrival information and property instructions
- Follow up after your stay (feedback, issue resolution)
Legal basis:
- Performance of a contract
- Legitimate interests (customer service and relationship management)
3.3 For Safety, Security, and Legal Compliance
- Verify your identity where necessary
- Prevent, detect, and investigate fraud or abuse
- Comply with legal obligations (e.g., tax, local guest registration requirements)
- Handle legal claims or disputes
Legal basis:
- Compliance with legal obligations
- Legitimate interests (property protection, risk management)
Where local law requires collection of guest information for security, immigration, or tourism regulations (e.g., local authorities in Mexico), we will collect and share such data as legally required.
3.4 To Improve Our Site and Services
- Analyze how visitors use the Site
- Improve layout, design, and content
- Monitor performance and fix technical issues
Legal basis:
- Legitimate interests (running and improving our business)
- Consent, where cookie/analytics consent is required
3.5 Marketing and Optional Communications
We may occasionally:
- Send you information about special offers or news related to Villa 1
- Request feedback or a review of your stay
You can opt out of marketing emails at any time by following the “unsubscribe” link or contacting us directly.
Legal basis:
- Consent (where required by law)
- Legitimate interests (to promote our property to existing guests), within legal limits
4. How We Share Your Information
We do not sell your personal information.
We may share information with:
4.1 Service Providers
Trusted third parties who help us operate our business, such as:
- Payment processors (e.g., Square, PayPal, your bank)
- Website hosting & IT providers
- Email and communication tools
- Professional advisors (e.g., accountants, lawyers)
They are only allowed to use your information to provide services to us and must protect it appropriately.
4.2 Booking Platforms
If you book through a third-party site (Vrbo, Airbnb, etc.):
- They share booking details with us
- We may update them regarding changes, cancellations, or disputes
- Their own privacy policies apply to their processing
4.3 Government Authorities & Legal Requirements
We may disclose personal information if:
- Required by law, regulation, or legal process
- Requested by law enforcement or government agencies
- Necessary to protect our rights, property, safety, or that of guests or others
4.4 Business Transfers
If we ever sell or restructure Villa 1 or transfer management of the property:
- Guest information may be transferred to the new owner/manager
- They would be required to respect this Privacy Policy or provide an equivalent level of protection
5. Cookies and Similar Technologies
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your actions and preferences.
5.2 Types of Cookies We May Use
- Strictly necessary cookies: Required for basic site functionality (e.g., security, navigation).
- Performance/analytics cookies: Help us understand how visitors use the Site (e.g., via Google Analytics).
- Functionality cookies: Remember your preferences (e.g., language).
Where required by law (for example, in the EU), we will ask for your consent before placing non-essential cookies. You can also adjust your browser settings to block or delete cookies, but some parts of the Site may not work correctly.
5.3 Third-Party Cookies
Some cookies may be set by third parties (e.g., analytics, social media platforms, embedded maps or videos). These third parties have their own privacy and cookie policies.
6. International Transfers
Villa 1 is located in Mexico. If you are visiting us from another country:
- Your information may be transferred to and processed in Mexico and other countries where our service providers operate (e.g., the United States, EU).
- These countries may have different data protection laws than your country.
When required by law, we take steps to ensure that cross-border transfers are made with appropriate safeguards (e.g., standard contractual clauses, equivalent protections, or reliance on your explicit consent).
7. Data Retention: How Long We Keep Your Information
We keep personal information only for as long as needed to:
- Provide our services and manage your booking
- Comply with legal, tax, and accounting obligations
- Resolve disputes or enforce our agreements
Typical retention examples:
- Booking and billing records: kept for the period required by tax and accounting laws
- Communication records: kept as long as needed to respond and manage our relationship with you
- Marketing data: kept until you unsubscribe or ask us to delete it (subject to legal limits)
When information is no longer required, we will delete it or anonymize it.
8. Security
We take reasonable technical and organizational measures to protect your personal information, including:
- Using secure servers and encryption where appropriate
- Restricting access to personal data to those who need it to perform their duties
- Using trusted third-party providers for payments and hosting
However, no system can be guaranteed 100% secure. Transmission of information over the internet is at your own risk, and we cannot guarantee complete security of data transmitted to or from the Site.
9. Your Rights
Your rights depend on where you live, but may include:
9.1 General Rights (Many Countries)
You may have the right to:
- Access: Ask for a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Ask us to delete your data in certain circumstances
- Restriction: Ask us to restrict how we process your data in certain cases
- Objection: Object to certain processing (especially direct marketing)
- Portability: Request a copy of your data in a structured, machine-readable format (where applicable)
To exercise any of these rights, please contact us at:
We may need to verify your identity before fulfilling your request and may decline certain requests where permitted by law (e.g., if we must keep data for tax reasons).
9.2 EU / UK / EEA Visitors (GDPR-Type Rights)
If you are located in the EU/EEA or UK, you generally have the rights above under GDPR/UK GDPR.
You also have the right to lodge a complaint with your local data protection authority.
9.3 California Residents (CCPA/CPRA-Type Rights)
If you are a California resident, you may have additional rights under California law, including:
- The right to know what categories of personal information we collect and disclose
- The right to request deletion of personal information (subject to exceptions)
- The right to opt out of “sale” or “sharing” of personal information (we do not sell your data in the traditional sense)
- The right not to be discriminated against for exercising your rights
You or your authorized agent can exercise these rights by contacting us at host@villa1.com and indicating that you are a California resident making a privacy request.
10. Children’s Privacy
Villa 1 is intended for adults and families booking travel. We do not knowingly collect personal data directly from children under 16 without parental or guardian consent.
- If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately.
- If we learn we have collected personal information from a child without appropriate consent, we will delete it.
11. Third-Party Websites and Links
Our Site may contain links to third-party websites or services (e.g., booking platforms, activity providers, restaurants, tour operators).
- We are not responsible for the privacy practices or content of those third-party sites.
- We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Legal or regulatory requirements
- Improvements to our services
When we make changes, we will update the “Last updated” date at the top of this page. Significant changes may be communicated by additional notice (e.g., on the Site or via email).
Your continued use of the Site or our services after changes take effect means you accept the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or how we handle your data, you can contact us at:
Villa 1
Email: host@villa1.com
Phone: 281-789-2226
We will do our best to respond promptly and help resolve any concerns.
Questions about this page? Contact the owners. To plan a stay, see Villa 1, our book direct guide or check dates. See also our guest terms and conditions.
