ESEN
Book
ServicesYour arrivalDestinationsFleet & extrasGroups
ESEN

Privacy notice

How CYBA Travel handles your personal data and how you can exercise your rights.

Last updated: October 6, 2026. This is an English translation; the Spanish version prevails.

1. Who is responsible for your data

CESAR SAUL MARTINEZ MUÑOZ, an individual (persona física) doing business as CYBA Travel, with address at Calle Zafiro 27, Int. F, Col. Paseo Kusamil, ZIP code 77539, Cancun, Benito Juarez, Quintana Roo, Mexico («CYBA Travel», «we» or «us»), is responsible for processing your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

For any privacy matter, contact the CYBA Travel Personal Data Department:

This notice applies to data we collect on cybatravel.com, in the booking app reservar.cybatravel.com, by WhatsApp, email, phone and in person.

2. Personal data we process

  • Identification and contact: name, phone or WhatsApp number and email of the person booking and, where applicable, the lead passenger.
  • Trip details: service type, dates and times, airport, airline and flight number, hotel, Airbnb or pick-up address and destination (including the location or Google Maps link you share), number of passengers and suitcases, and special requests.
  • Minors: only the number and approximate age of children when you request a baby seat or booster. This information is provided by their parent or guardian.
  • Payment: amount, payment type (deposit or full payment), payment status and the card brand and last digits. Your full card details are captured directly by our payment processor (Stripe); CYBA Travel does not see or store them.
  • Invoicing (only if you request a Mexican invoice): name or company name, RFC, tax regime, tax ZIP code, CFDI use and the email to receive it.
  • Communications: the messages we exchange with you by WhatsApp, email or phone about your service, and your answers to satisfaction surveys.
  • Browsing: technical data about your visit, such as IP address, device and browser type, pages visited and buttons used (see section 8).

Sensitive data: we do not ask for sensitive personal data. If you choose to tell us about a health or mobility need so we can assist you better (for example, using a wheelchair), we will use it only to provide that assistance and will ask for your express consent.

3. Why we use your data

Necessary purposes (required to provide the service you request):

  1. Quote, record and confirm your booking.
  2. Schedule and provide the transfer: assign the vehicle and driver, share their details with you, track your flight and coordinate the pick-up.
  3. Charge the deposit and balance, and process cancellations, coupons and refunds.
  4. Contact you before, during and after the service (confirmation, reminder, changes and incidents).
  5. Issue invoices when requested and comply with tax and legal obligations.
  6. Handle complaints, clarifications, lost items and any claim related to your service.
  7. Keep our systems secure and prevent fraud.

Secondary purposes (not necessary for the service, but they help us serve you better):

  1. Send you satisfaction surveys and ask for a review.
  2. Send you CYBA Travel promotions, news and offers.
  3. Produce internal statistics about the use of our website and services.

If you do not want us to use your data for any secondary purpose, message the WhatsApp number or email in section 1 with the subject «No secondary use». Saying no will never be a reason to refuse you service.

4. Who we share your data with

To provide the service we use providers that process your data on our behalf and following our instructions: payment processing (Stripe), website and app hosting (Netlify), messaging (WhatsApp by Meta), email delivery (Resend and Google), error monitoring (Sentry) and website analytics (Google Analytics, once enabled). Some of them store information on servers outside Mexico, mainly in the United States.

We may also transfer your data without your consent in the cases allowed by article 36 of the LFPDPPP:

  • To partner transportation companies, when another vehicle needs to provide or support your transfer, sharing only the data required to do so (article 36, sections IV and VII).
  • To competent authorities, when required by law or for the administration of justice (article 36, sections I and V).
  • To whoever is necessary to establish, exercise or defend a right in legal proceedings (article 36, section VI).

We do not sell or rent your personal data.

5. How to limit the use or disclosure of your data

You can ask us at any time, by WhatsApp or email, to stop sending you promotions or surveys, and we will add you to our internal opt-out list. Mexican residents can also register with PROFECO’s Public Registry to Avoid Advertising (REPEP).

6. ARCO rights and withdrawing consent

You have the right to access your data, rectify it if it is inaccurate, cancel it when you believe it is not being used in accordance with the law, and object to its use for specific purposes (ARCO rights). You can also withdraw your consent, except where the law or an ongoing legal relationship requires us to keep processing your data (for example, during a service in progress or for tax obligations).

To exercise these rights, send your request to ventascyba@gmail.com or WhatsApp +52 998 758 8424, including (LFPDPPP article 28):

  1. Your name and a way to receive our answer.
  2. A copy of your official ID or, if a representative files it, proof of their authority and their ID.
  3. A clear description of the data concerned (except for access requests).
  4. The right you want to exercise or what you are asking for.
  5. Any information that helps us locate your data, such as your booking number.

For rectification, tell us what needs correcting and attach supporting documents. We will answer within 20 days of receiving your request and, if it applies, carry it out within 15 days of our answer (LFPDPPP article 31). Exercising these rights is free; only justified shipping or copying costs may apply.

7. How long we keep your data

We keep your data as long as needed for the purposes in this notice and for the periods required by Mexican tax and commercial law. After that we block it and delete it securely.

8. Cookies and similar technologies

Our website records, in aggregate, which pages are visited and which buttons are used (for example, «Book» or WhatsApp) to improve the experience. Once we enable Google Analytics, it will use cookies to measure visits. You can block or delete cookies in your browser settings and the website will keep working. When you pay, Stripe may use its own cookies to process the payment securely and prevent fraud.

9. How we will tell you about changes

If we change this notice, we will publish the updated version at cybatravel.com/en/privacidad/ with its update date. If a change affects purposes that require your consent, we will ask for it again.

10. Authority

If you believe your right to personal data protection has been violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the competent authority under the LFPDPPP.

Book in the app