Atomic← Home

Legal

Privacy Policy

Last updated: May 30, 2026

1. Data controller

Atomic Yacht Charter (operated in Cancún, Quintana Roo, Mexico) is responsible for the use and protection of your personal data in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and applicable provisions.

Address: Jungle Tour Cancún, Boulevard Kukulcán, Hotel Zone, Cancún, Quintana Roo, Mexico. Contact: hola@atomicboat.com.

2. Personal data we collect

We only collect the data needed to provide the service:

  • Identification and contact: full name, email address, WhatsApp number.
  • Booking data: date, time, package booked, number of guests, occasion, optional client notes.
  • Payment data: when you pay with Stripe, your card details go directly to Stripe — Atomic never stores them. If you pay by transfer or cash, we only record the amount and method.
  • Technical data: IP address, browser type, language, pages visited. Collected by our security and analytics tools (see section 8).

We do not collect sensitive personal data (racial origin, health status, beliefs, sexual preferences, etc.) nor financial data beyond the charged amount.

3. Primary purposes of processing

We use your data for purposes necessary to provide the service:

  • Verify availability and confirm your booking.
  • Coordinate departure, boarding and operational communication before and during the event.
  • Process payments (deposit and balance) and issue receipts.
  • Handle inquiries, complaints, cancellations and refund requests per the published policy.
  • Comply with accounting, tax and legal obligations applicable in Mexico.
  • Maintain platform security (fraud prevention, abuse, access auditing).

4. Secondary purposes

The following purposes are NOT necessary for the service. You may refuse their use without affecting your booking by writing to hola@atomicboat.com:

  • Post-experience satisfaction surveys (only if you gave us your WhatsApp/email for this).
  • Sending promotions, news and editorial content about new routes or packages.
  • Aggregate statistical analysis to improve the website experience (not identifiable to you).

5. Data transfers to third parties

We do not sell or rent your data. We only transfer it to service providers who assist us in operations, and only with the data strictly necessary for the purpose:

  • Airtable, Inc. (USA) — encrypted database where bookings are stored. Policy.
  • Vercel, Inc. (USA) — website hosting and image storage. Policy.
  • Stripe Payments México, S.A. de C.V. / Stripe, Inc. — card payment processing. Receives card details directly; Atomic does not see them. Policy.
  • Resend, Inc. (USA) — sending transactional emails (confirmations, reminders).
  • Google LLC — Google Analytics 4, only if you accepted analytics cookies.
  • Functional Software, Inc. (Sentry) — capturing technical errors to keep the platform stable. Personal data in reports is automatically scrubbed before sending.
  • Mexican tax or judicial authorities — where there is a legitimate requirement (SAT, judicial authority). In that case we’ll notify you unless prohibited.

6. ARCO rights and how to exercise them

You have the right to Access, Rectify, Cancel or Object to the processing of your personal data (ARCO rights), as well as to revoke your consent.

To exercise any of these rights, send an email to hola@atomicboat.com with:

  • Your full name and contact email.
  • A document proving your identity (official ID or passport, digital copy).
  • A clear, precise description of the right you are exercising (access, rectification, cancellation or objection).
  • If rectification: the correct data and supporting documentation.

We will respond within a maximum of 20 business days per article 32 of the LFPDPPP. The response and, where applicable, the effect of the right are free of charge.

7. Data retention and deletion

Your booking data is kept for the duration of the commercial relationship and for the periods required by Mexican accounting and tax law (CFF: up to 5 years after the operation is closed). After those periods, the data is deleted or anonymized.

8. Cookies and tracking technologies

We use the following categories of cookies and similar technologies:

  • Essential (always on): user session, admin authentication, CSRF protection, language preferences. The site does not work without these.
  • Analytics (opt-in): Google Analytics 4. They help us understand which pages are useful. They do not identify you personally.
  • Marketing (opt-in): only if you accept, we measure the effectiveness of advertising campaigns.

You can change your choice at any time by clearing the site data in your browser settings, or by writing to us at hola@atomicboat.com.

9. Security measures

We apply reasonable technical, physical and administrative measures to protect your data: HTTPS/TLS 1.3 encryption in transit, bcrypt hashing for administrative passwords, role-restricted database access, error monitoring and access auditing. No system is 100% impenetrable, but we do what is reasonably possible to keep your data safe.

10. Notice of changes

Any substantial change to this notice will be published on this same page with the update date. If the change introduces new purposes, we will notify you through the channel we have agreed with you (email/WhatsApp).

11. Competent authority

If you believe your data protection right has been violated, you may file a complaint with INAI (National Institute for Transparency, Access to Information and Protection of Personal Data): home.inai.org.mx.

This privacy notice is comprehensive and complies with articles 15, 16 and 17 of the LFPDPPP. By using this site or contracting our services, you express your informed consent to the processing of your data under the terms described here.