Privacy
& cookies.

BRYAN OSVALDO ACOSTA SANCHEZ, with address at Simon Bolivar, Las Americas, ZIP code 55076, Ecatepec de Morelos, State of Mexico, Mexico, is responsible for the processing of personal data collected through hotairballoonmx.com. For any privacy matter, email us at hello@hotairballoonmx.com.

This policy explains what data we collect, how we use it, who it may be shared with, and how you can exercise your rights.

• Contact and booking data you provide: name, email address, telephone number, date, number of passengers, and experience preferences.
• Data needed to manage operations, support, and communications related to a booking.
• Technical data: browser, device, pages visited, and cookie identifiers, when needed to operate the site or when you accept analytics.

We do not store full card details. Payments are processed by Stripe.

We use data to respond to requests, manage bookings, process payments, provide support, prevent fraud, protect the site, and comply with legal obligations.

With your consent, we also use usage information to measure visits, identify experience issues, and improve the booking process. Even without cookie consent, Google Analytics may receive cookie-free, aggregated signals to model metrics; access to the service does not depend on accepting analytics cookies.

The site uses strictly necessary cookies for its operation. Analytics cookies, heat maps, and session recordings are activated only when you choose “Accept analytics” in the notice. Before that choice, or if you decline, Google Analytics operates in advanced consent mode: it may receive cookie-free signals for aggregated measurement without creating analytics identifiers or activating PostHog.

We use Google Analytics 4 and PostHog for these functions. Google Analytics helps us measure visits, traffic sources, and booking actions; PostHog helps us identify navigation friction through heat maps and recordings with form fields masked. If you accept analytics and complete a purchase, we may associate the confirmed conversion with a pseudonymous Analytics identifier; we never send Google your name, email, phone number, or payment information. See also how Google uses information from sites and apps.

You can change your decision at any time. Your booking remains available if you decline these cookies.

We use service providers that act on our behalf: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Google Analytics 4, and PostHog (analytics with cookies only with consent and cookie-free aggregated signals according to the preference selected). These providers may process data under their own notices and security measures, only to the extent necessary for their services.

We retain data for as long as necessary for the purposes described, legal obligations, dispute resolution, and the defense of rights. We apply reasonable administrative, technical, and organizational safeguards to protect it; no system is completely infallible.

You may request access to, correction of, cancellation of, or objection to the processing of your personal data, as well as limit its use for secondary purposes. Send your request to hello@hotairballoonmx.com with your name, a way to respond, and a clear description of your request. We may ask for reasonable information to verify your identity before responding.

We may update this policy to reflect legal, operational, or technological changes. We will publish the current version on this page and indicate its update date.