This Privacy Policy applies to all users of retpickups.com and related services, regardless of their country of origin. It complies with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) of Mexico, the California Consumer Privacy Act (CCPA) of the United States, and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.
The data controller responsible for your personal information is:
RET Pickups is a private airport transfer service operating from Cancún International Airport to destinations throughout the Riviera Maya, México.
We collect personal information only when necessary to provide our services. The categories of data we collect include:
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data, unless explicitly provided by the user in a special request (e.g., medical equipment for transport).
We use the personal information we collect for the following purposes:
We process your personal data under the following legal bases depending on the applicable jurisdiction:
We work with trusted third-party services to operate our business. These companies act as data processors under contract with us and are not authorized to use your data for their own purposes beyond the scope of their service:
| Service | Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|---|
| Payment processing | Stripe, Inc. | Secure payment links and transaction records | Name, email, payment amount | stripe.com/privacy |
| Web analytics | Google Analytics (Google LLC) | Website traffic and usage analysis | Anonymized browsing data, IP (masked) | policies.google.com/privacy |
| Tag management | Google Tag Manager (Google LLC) | Managing tracking scripts without code changes | No personal data directly; manages other tags | policies.google.com/privacy |
| Business profile | Google My Business (Google LLC) | Business listing on Google Maps and Search | No personal user data shared | policies.google.com/privacy |
| SEO monitoring | Google Search Console (Google LLC) | Website search performance monitoring | Aggregated search data, no personal data | policies.google.com/privacy |
| Advertising pixel | Meta Pixel (Meta Platforms, Inc.) | Conversion tracking and retargeting on Facebook/Instagram | Browsing behavior, conversion events (with consent only) | facebook.com/privacy/policy |
| Communication | WhatsApp (Meta Platforms, Inc.) | Customer communication and booking coordination | Messages, phone number | whatsapp.com/legal/privacy-policy |
| AI assistance | Anthropic, PBC | Website development assistance (not customer-facing) | No customer data shared | anthropic.com/privacy |
Future services (Phase 2): We intend to integrate additional automation and CRM services in future development phases, including N8N workflow automation, SendGrid for email, and WhatsApp Business API. This policy will be updated accordingly before any such integration goes live.
As a Mexican company serving customers primarily from the United States and Canada, your personal data may be transferred between México, the United States, and Canada in the course of providing our services.
Such transfers occur when:
All transfers to third-party processors are governed by data processing agreements that require adequate protection standards equivalent to those applicable in México under LFPDPPP.
For transfers involving Canadian residents, we ensure compliance with PIPEDA Schedule 1 principles. For California residents, we ensure compliance with CCPA requirements.
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, subject to the following retention periods:
| Data type | Retention period | Reason |
|---|---|---|
| Booking and transfer records | 5 years | Civil liability prescription under Mexican law |
| Payment records and receipts | 5 years | Tax and fiscal obligations (SAT requirements) |
| Communication records (WhatsApp/email) | 2 years | Customer service and dispute resolution |
| Analytics data (Google Analytics) | 26 months | Google Analytics default + website optimization |
| Marketing data (Meta Pixel) | 180 days | Meta's default retention for pixel events |
| Cookie preferences | 12 months | Stored locally in your browser (localStorage) |
After the applicable retention period, your data is securely deleted or anonymized so it can no longer be associated with you.
Depending on your country of residence, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at info@retpickups.com with the subject line "Privacy Rights Request." We will respond within 20 business days. We may require identity verification before processing your request.
Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use, their purpose, and how to manage them, please see our Cookie Policy.
In summary, we use:
You can manage your cookie preferences at any time through our cookie banner or your browser settings.
We use and may use artificial intelligence (AI) technologies in the following contexts:
The retpickups.com website was developed with the assistance of AI tools, including Anthropic's Claude. No customer personal data was shared with AI providers during development.
In a future development phase, we intend to implement automated communication systems powered by AI (including chatbot functionality via WhatsApp Business API and automated email systems). When implemented, these systems will:
We do not currently use automated decision-making processes that produce legal or similarly significant effects on individuals. All booking confirmations, pricing decisions, and service assignments are reviewed by human team members.
Our services are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children without verifiable parental consent.
When a booking includes child passengers (for child seat requests), the information provided relates to the child's age or weight for safety purposes only. This information is used solely to prepare the appropriate child restraint system and is not retained beyond the service delivery period.
If you believe we have inadvertently collected information from a child, please contact us immediately at info@retpickups.com.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will:
We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.
For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact our Data Privacy Officers:
For complaints regarding our handling of your data under PIPEDA, you may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
For complaints under CCPA, you may contact the California Attorney General's Office at oag.ca.gov/privacy/ccpa.
For complaints under LFPDPPP, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) at inai.org.mx.