Privacy notice

John Collins, located at Cinco Señores 24, Zona Centro, 36000 Guanajuato, Gto., México, is responsible for processing your personal data. We run the sites gtowalkingtours.com and mexicostreetfood.com.

• Your name, email and phone or WhatsApp number.
• Your booking details: tour, date, number of adults and children, language and any notes you write to us.
• The status and amount of your payment. We don't receive your card or account details: PayPal processes the payment.
• The site you came from and your visit's campaign (UTM parameters), so we know which channels bring bookings.

We don't process sensitive personal data or financial data.

We only use your data for what's needed to provide the service you booked:

• to record and manage your booking and organize the departure with your guide;
• to send your confirmation and contact you about your tour by email or WhatsApp;
• to charge the deposit and, when it applies, refund it;
• to ask once, the day after your tour, for your feedback on the service;
• to meet legal obligations, such as tax requirements.

We don't use your data for advertising and we don't sell it. Since there are no secondary purposes, there's nothing you need to do to limit them.

Only with providers that help us deliver the service and act on our behalf: PayPal (deposit payment and refunds), Resend (email delivery) and Google Cloud / Firebase (hosting of the site and database). We make no transfers that require your consent.

The site doesn't use tracking or advertising cookies. During your visit it stores the site you came from and the campaign in your browser (sessionStorage), and they're deleted when you close the tab.

You can access, correct or delete your data, or object to its use (ARCO rights), and withdraw your consent. Email jncgto@gmail.com with your name, your booking reference if you have one, the right you want to exercise and an ID. We reply within 20 business days and, if it applies, carry it out within the next 15 days. It's free.

If you believe we didn't handle your request properly, you can contact the Secretaría Anticorrupción y Buen Gobierno, Mexico's data protection authority.

As long as it's needed for your booking and to meet our legal obligations. After that we delete it.

We'll publish any change on this page, with the date it was last updated.