PRIVACY NOTICE
In accordance with the Federal Law on Protection of Personal Data Held by Private Parties (“LFPD”), its Regulations, and other applicable provisions, we inform you of the following:
Carolina Zaga Lebrija, with an address for hearing and receiving notifications located at Lomas de Vistahermosa No. 140, Col. Lomas de Vistahermosa, Cuajimalpa, C.P. 05100, is the “Responsible Party” for the processing of your personal data. This Privacy Notice is addressed to users of our website, clients, and prospects (“Data Subject”). In the event that the Data Subject is not of legal age, his/her parent or legal guardian declares and guarantees that he/she has reviewed and expressly accepts this Privacy Notice.
The term “Personal Data” in this Privacy Notice refers to information relating to an identified or identifiable natural person. The purpose of this Privacy Notice is to inform you which Personal Data we collect, how we use it, and how you may exercise certain rights you have.
Personal Data We Collect and Process
The “Personal Data” we collect and process includes:
a. Identification Data
b. Contact Data
c. Location Data (to the extent applicable and necessary)
d. Financial or asset data (to the extent applicable and necessary)
e. Cookies (when using our site) f. “Sensitive Data”: Health data (to the extent applicable and necessary).
Purposes of Processing
Primary Purposes:
The Personal Data we collect from you will be used for the following purposes, as applicable, to (i) comply with our obligations arising from a legal or contractual relationship (between the Responsible Party and the Data Subject), (ii) comply with applicable legal provisions, or (iii) exercise our rights. You grant us your consent to:
a. Verify the User’s identity;
b. Create, manage, and administer the User’s registration and/or account and/or profile;
c. Provide User support (including software updates);
d. Process payments;
e. Communications related to the provision of services, including notifications about purchases and changes to our terms, conditions, and policies;
f. Create, develop, administer, offer, and improve our products, services, content, and advertising, as well as for loss prevention, fraud prevention, and complaint management; and
g. Comply with our contractual and legal obligations.
Secondary Purposes:
Additionally, by accepting this Privacy Notice, you grant us your consent to use your Personal Data for the following secondary purposes:
a. Send you advertising, promotional, informational, and/or commercial prospecting communications of a personalized nature.
If you do not wish your Personal Data to be processed for any or all secondary purposes, you may notify us following the procedure described in the “ARCO Rights” section of this Privacy Notice. Opposition will not be grounds for terminating the relationship established with us.
If we obtain your Personal Data indirectly, you have a period of 5 (five) business days from the first contact with you to express your refusal for the processing of your Personal Data for secondary purposes, through the email established in the “ARCO Rights” section.
ARCO Rights
You have the right to access, rectify, cancel, or oppose the use of your Personal Data to the extent permitted by law (“ARCO Rights”).
You may, at any time, request the exercise of ARCO Rights, as well as revoke your consent and limit the use or disclosure of the Personal Data provided, through our email: info@kingdommagictrips.com. The request must include:
a. Name of the Data Subject and the means by which we will communicate the response to your request;
b. Documents proving your identity or that of your legal representative;
c. Clear and precise description of the Personal Data and/or Sensitive Personal Data regarding which you seek to exercise any ARCO Rights, as well as the ARCO Rights to be exercised; and
d. Any other element that facilitates the location of the Personal Data regarding which you seek to exercise ARCO Rights.
Once the ARCO Rights request is received:
a. The Responsible Party will have 20 (twenty) business days to respond regarding its admissibility.
b. If admissible, the Responsible Party will have an additional 15 (fifteen) business days to grant the request.
c. The aforementioned period may be extended for an equal period when justified and duly informed.
d. Even if the exercise of the requested right is not admissible, the Responsible Party must respond to your request, explaining the reasons for inadmissibility, within the 20 business days previously indicated.
All ARCO Rights requests, as well as any questions or concerns related to the protection of your Personal Data, must be submitted through the email indicated in this Privacy Notice.
Data Transfer
Your Personal Data will be transferred for the following necessary purposes, which, according to the exceptions provided by the LFPD, do not require your consent:
-
To maintain or fulfill a legal relationship between the Responsible Party and the Data Subject (including service provision and preparatory actions for service provision);
-
To comply with legal provisions;
-
To fulfill contractual obligations with third parties in the interest of the Data Subject (including, when necessary, as part of a corporate transaction, share purchase, acquisition, or merger with another company; and to exercise or defend our legal rights);
-
To the extent required to comply with a law or treaty to which Mexico is a party;
-
For safeguarding public interest or for the procurement or administration of justice;
-
For the recognition, exercise, or defense of a right in a judicial process;
-
For emergency reasons.
The third parties to whom we transfer your Personal Data may be located in Mexico or abroad and include competent authorities, business partners, hotels, external agents, and contractors (including lawyers, accountants, auditors, and other professional services to comply with our legal or contractual obligations). We do not transfer your Personal Data for other purposes that require your consent.
Use of Cookies
If you use our website, please note that we use cookies, web beacons, and other technologies through which it is possible to monitor your behavior as an Internet user and provide you with a better user experience while browsing the site.
By using cookies and similar technology, we may collect the following Personal Data: (i) the Internet pages you visit; (ii) the links you follow; (iii) the IP address; and (iv) the site you visited before entering ours.
These cookies and other technologies may be disabled. To learn how to do so, consult your browser’s help menu. Please note that if you disable cookies, you may not be able to access certain personalized functions on our websites.
Modifications to the Privacy Notice
This Privacy Notice may be updated and/or modified at any time. Such updates will be available on our website: https://www.magickingdomtrips.com
Last Update: May 18, 2026.