Privacy Policies

WEYKIKI Boutique Hotel

Last updated: September 2026

1. Data Controller

WEYKIKI Boutique Hotel, operated by B2AN GROUP, S.A. de C.V., RFC BGR251016KT4, is responsible for the collection, use, storage and processing of personal data in connection with the Hotel’s website, reservations, communications, guest stays and related Hotel services.

Registered address:

Av. Moliere 310, Oficina 1 Piso 3

Col. Polanco I Sección

Miguel Hidalgo, Ciudad de México

C.P. 11510, México

Privacy contact:

info@weykiki.com

This Privacy Policy explains what personal data WEYKIKI may collect, how such information may be used, with whom it may be shared, and the rights available to data subjects under applicable Mexican data protection law.

2. Personal Information We May Collect

Depending on the nature of your interaction with WEYKIKI, we may collect the following categories of personal information:

Identification information: name, surname, date of birth, nationality and information contained in a passport or other official identification presented for registration or check-in.

Contact information: telephone number, WhatsApp number, email address and, where applicable, address.

Reservation and stay information: arrival and departure dates, room category, number and identity of accompanying guests, guest preferences, special requests, reservation history and services requested or used.

Tax information: RFC, legal or business name, tax address and other information required to issue Mexican tax invoices when requested.

Payment and transaction information: information necessary to process accommodation, food and beverage and other Hotel charges, guarantees and refunds. Payment card information may be processed through authorized banks, payment processors or Hotel technology systems used to complete or guarantee transactions.

Communications: information contained in communications with WEYKIKI through email, telephone, WhatsApp, the Hotel’s website or other official communication channels.

Additional service information: information provided in connection with requests for transportation, activities, experiences or other additional services.

Technical information: information that may be collected when using the Hotel’s website, including IP address, browser or device information, website usage and interaction information, cookies and similar technologies, where applicable.

3. Sensitive Personal Information

WEYKIKI does not routinely request or collect sensitive personal data unless it is reasonably necessary to provide a service requested by the guest or to address a specific safety, accessibility or guest-service requirement.

Guests may voluntarily provide information concerning allergies, dietary requirements, accessibility needs or other health-related circumstances when relevant to their stay or to a service they request.

Where sensitive personal data is provided, WEYKIKI will process such information only for the purposes for which it was provided, with the appropriate consent where required, and in accordance with applicable Mexican data protection law.

WEYKIKI will take reasonable measures to limit access to sensitive personal data to personnel who require such information for the relevant purpose.

Guests are requested not to provide sensitive personal information unless it is reasonably necessary for WEYKIKI to fulfill a specific request.

4. Primary Purposes of Processing

WEYKIKI may process personal information for the following primary purposes:

* Managing, confirming, modifying and administering reservations and guest stays.

* Completing guest registration, check-in and check-out procedures.

* Processing payments, refunds and other transactions related to Hotel services.

* Providing accommodation, food and beverage, guest assistance and other services requested before, during or in connection with the stay.

* Communicating with guests before, during and after their stay regarding their reservation, requests, services or relevant Hotel information.

* Managing guest preferences and special requests.

* Responding to inquiries, complaints, incidents, lost-property matters and customer-service requests.

* Issuing invoices and complying with tax, accounting, administrative, legal and regulatory obligations.

* Maintaining the safety and security of guests, staff and Hotel property.

* Preventing and investigating fraud, misuse, unauthorized transactions, security incidents or other unlawful activity.

* Managing services requested by guests that may involve independent third-party providers.

* Improving Hotel operations, services and guest experience using information that WEYKIKI is legally permitted to process for such purposes.

WEYKIKI may maintain a customer database containing guest identification and contact information, reservation history and relevant stay information for customer relationship management, administrative purposes, service improvement and the management of future reservations, in accordance with applicable law.

5. Marketing and Secondary Purposes

Where permitted by applicable law and, when required, with the guest’s consent, WEYKIKI may use contact information, including email addresses and telephone or WhatsApp numbers, for secondary purposes including:

* Promotions and special offers.

* Hotel news and updates.

* Information regarding future stays, Hotel services, events and experiences.

* Guest satisfaction surveys.

* Other marketing and promotional communications relating to WEYKIKI.

Guests may request at any time that WEYKIKI stop using their personal information for marketing and promotional purposes by contacting:

info@weykiki.com

Refusing or withdrawing consent for marketing purposes will not affect an existing reservation or the provision of accommodation or other Hotel services.

6. Service Providers and Data Transfers

WEYKIKI may share or transfer personal information when reasonably necessary for the operation of the Hotel and the provision of services requested by guests, including with:

* Reservation, property-management and booking technology providers.

* Payment processors, financial institutions and other providers involved in processing or securing transactions.

* Online travel agencies, travel professionals and reservation platforms, where relevant to the guest’s reservation.

* Professional advisers and service providers, including accounting, legal, technology, website, hosting, invoicing and administrative providers, where access to personal information is reasonably necessary for the services they provide.

* Independent third-party providers where necessary to arrange a service specifically requested by the guest, such as transportation, activities or other guest services.

* Insurers and professional advisers in connection with incidents, disputes or claims.

* Government, tax, judicial, regulatory or law-enforcement authorities where disclosure is required or permitted by applicable law.

Certain service providers may process personal information outside Mexico. Where applicable, such processing or transfer will be handled in accordance with applicable legal requirements.

WEYKIKI will take reasonable measures to ensure that third parties processing personal information on its behalf handle such information appropriately and only for the purposes for which access is provided.

WEYKIKI does not sell guest personal information to third parties for their independent marketing purposes.

Where consent is legally required for a transfer of personal information, WEYKIKI will obtain such consent in accordance with applicable law.

7. Cookies and Similar Technologies

[TO BE REVIEWED AND COMPLETED BY BANAO BASED ON THE WEBSITE’S ACTUAL COOKIE, ANALYTICS AND TRACKING CONFIGURATION.]

The final wording of this section should accurately reflect the technologies actually implemented on the WEYKIKI website, including, where applicable, website functionality cookies, booking-engine technologies, analytics tools, advertising or conversion tracking, Google services, Meta technologies and other third-party tracking technologies.

Banao should also confirm whether the website uses non-essential cookies or tracking technologies requiring a consent mechanism and whether users can manage their cookie preferences before such technologies are activated, where required.

8. ARCO Rights

Under applicable Mexican data protection law, individuals may exercise their rights of:

Access: to know what personal information WEYKIKI holds and information relating to its processing.

Rectification: to request correction of inaccurate or incomplete personal information.

Cancellation: to request deletion or cancellation of personal information where legally applicable.

Opposition: to object to certain processing of personal information where legally permitted.

Individuals may also request, where applicable, the limitation of the use or disclosure of their personal information or the withdrawal of consent previously granted, subject to applicable legal requirements and exceptions.

Requests may be submitted to:

info@weykiki.com

A request should include sufficient information to identify the person making the request, the personal information involved, the right the person wishes to exercise and a method by which WEYKIKI can communicate its response.

To protect personal information and prevent unauthorized requests, WEYKIKI may request reasonable information or documentation necessary to verify the identity of the person making the request or, where applicable, the authority of their legal representative.

WEYKIKI will process requests in accordance with the procedures and time periods established by applicable Mexican data protection law.

Certain requests may not result in immediate deletion or cessation of processing where WEYKIKI is required or legally permitted to retain or process the information, including for legal, tax, accounting, contractual, security or dispute-resolution purposes.

9. Data Retention

WEYKIKI will retain personal information only for as long as reasonably necessary for the purposes for which it was collected or subsequently processed in accordance with this Privacy Policy.

Retention periods may vary depending on the nature and purpose of the information and any applicable legal, tax, accounting, contractual, regulatory, security or dispute-resolution requirements.

Reservation history and relevant guest information may be retained as part of WEYKIKI’s customer relationship records where legally permitted and reasonably necessary for the purposes described in this Privacy Policy.

Information used for marketing purposes may be retained and used in accordance with applicable law until the guest withdraws consent, objects to such use, requests that marketing communications stop, or WEYKIKI otherwise determines that the information is no longer required for that purpose.

When personal information is no longer reasonably required and there is no legal or legitimate basis for retaining it, WEYKIKI will take appropriate measures to delete, block, anonymize or otherwise securely dispose of the information, as applicable.

10. Security Measures

WEYKIKI will maintain reasonable administrative, technical and physical security measures designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, destruction or other unauthorized processing.

Access to personal information will be limited, where reasonably possible, to Hotel personnel and authorized service providers who require access for legitimate operational, administrative, technical or legal purposes.

WEYKIKI will take reasonable measures to ensure that personnel with access to personal information handle such information appropriately and in accordance with their responsibilities.

No method of electronic transmission, storage or information-security system can guarantee absolute security. WEYKIKI will review and update its security measures as reasonably appropriate in light of its operations, technology and applicable legal requirements.

11. Information Relating to Minors

WEYKIKI welcomes guests aged 8 years and older. Guests under the age of 8 may be accommodated only with prior written approval from WEYKIKI.

The minimum age to make a reservation, check in and be the responsible guest for a reservation is 18 years. Guests under the age of 18 must stay with a parent, legal guardian or responsible adult.

Where personal information relating to a minor is reasonably necessary to provide accommodation or related Hotel services, WEYKIKI will seek to obtain and process such information through the minor’s parent, legal guardian or responsible adult, as appropriate.

Personal information relating to minors will be processed only to the extent reasonably necessary for the reservation, stay, safety, requested services or applicable legal obligations and in accordance with applicable Mexican data protection law.

WEYKIKI does not knowingly use personal information relating to minors for independent marketing purposes.

12. Changes to this Privacy Policy

WEYKIKI may update this Privacy Policy from time to time to reflect changes in applicable law, technology, Hotel operations, services or the manner in which personal information is processed.

The current version of this Privacy Policy will be made available through WEYKIKI’s official website and will identify the date of its most recent update.

Where required by applicable law, WEYKIKI will provide additional notice or obtain consent regarding material changes affecting the processing of personal information.

13. Privacy Contact

For questions, requests or concerns relating to the processing of personal information, the exercise of ARCO rights or this Privacy Policy, please contact:

WEYKIKI Boutique Hotel

Operated by B2AN GROUP, S.A. de C.V.

RFC: BGR251016KT4

Registered Address:

Av. Moliere 310, Oficina 1 Piso 3

Col. Polanco I Sección

Miguel Hidalgo, Ciudad de México

C.P. 11510, México

Email: info@weykiki.com

Telephone / WhatsApp: +52 954 138 1999