Privacy Policy

El Tasting Room is a tasting room, bar and licensed liquor store in Puerto Vallarta, Mexico. We run the website at eltastingroom.mx (English) and eltastingroom.mx/es (Spanish), and we are the party responsible for the personal data described in this policy: the “responsable” under Mexican law and the “controller” under European law.

• Address: Panamá 134, Col. 5 de Diciembre, Puerto Vallarta, Jalisco, 48350, México
• Email for privacy matters: info@eltastingroom.mx
• Phone: +52 322 980 1217

This policy explains what personal data we collect when you visit our website, contact us or book a tasting or event through it, why we collect it, who we share it with, how long we keep it and what rights you have over it.

It is written to meet Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), for which it serves as our full privacy notice (Aviso de Privacidad Integral), and the General Data Protection Regulation of the European Union and the United Kingdom (GDPR and UK GDPR) for visitors from Europe. It covers this website and the enquiries and bookings you make through it. The other websites and apps we link to have their own policies.

We collect only what we need to answer you, take your booking and run the website. Here is each source, what it collects and what we use it for.

Forms. When you send the contact form, the Tasting Matchmaker enquiry or a private event inquiry, we receive your name, email address, phone or WhatsApp number and whatever you type: group size, dates, location, occasion, message and preferred language. We use it to answer your enquiry, prepare a quote, arrange the tasting or event and follow up about it. These details go into our customer system, GoHighLevel (HighLevel Inc., United States), which also sends our replies to you by email, SMS or WhatsApp.

Text messages. Each form has one tick box, not pre-ticked and not required, that lets us text you (SMS or WhatsApp) about your enquiry and booking: replies, quotes, confirmations and reminders. We never send marketing or promotional messages by text. We record your answer with the date and the form it came from. You can withdraw consent at any time by replying STOP to any message, or by writing to us. Replying HELP gets you our contact details. Message and data rates may apply.

Bookings. Tastings are booked through Peek (Peek Travel Inc., United States) in a booking window on our site. Peek collects your booking and payment details under its own privacy policy. We receive the booking itself (your name, contact details, party size and date) and we never see your full card number.

Analytics. We use Google Tag Manager and Google Analytics 4 (Google LLC) to measure visits and clicks in aggregate: pages viewed, buttons clicked such as Book, WhatsApp or Call, and forms sent. They work with cookies. If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, these cookies are set only after you accept them in the cookie banner.

Visitor tracking by GoHighLevel. A small script recognises a returning visitor who has previously contacted us, so that your enquiry history is linked to your visit and we can follow up in context. For visitors from Europe, the same consent rule applies as for analytics.

Technical data. Our hosting provider, Vercel Inc. (United States), logs your IP address, browser and the pages you request in order to serve and secure the site. A cookie called “lang” remembers the language you chose. We use the country-level location derived from your IP address for two things only: deciding whether to show you the cookie banner, and pre-selecting the country code in the phone field of our forms.

Links to third parties. The site links to WhatsApp (Meta), Instagram, Facebook, YouTube (Google), Google Maps and Google reviews. When you use them, those companies’ own policies apply.

Cookies are small files your browser stores so that a website can remember something about your visit. These are the ones our site uses, with who sets them, what for and how long they last:

• lang. Set by El Tasting Room. Remembers the language you chose. 1 year. Strictly necessary, so no consent is needed.
• _ga and _ga_*. Set by Google. Analytics: tells visits and clicks apart by browser, reported to us in aggregate. Up to 2 years.
• GoHighLevel tracking. Set by HighLevel. Links your visit to your previous enquiry with us. Up to 1 year.
• Consent. Set by El Tasting Room. Remembers your cookie choice. 1 year. Strictly necessary.

If you visit from the EU, the EEA, the UK or Switzerland, the Google and HighLevel cookies are set only after you accept them in the banner, and you can change your choice at any time through “Cookie settings” in the website footer. Wherever you are, you can also block or delete cookies in your browser settings. The site works without the analytics and tracking cookies.

Under Mexican law we distinguish primary purposes, which we need in order to serve you (answering your enquiry, arranging your tasting or event, taking your booking and keeping the records the law requires), from secondary purposes, which are optional (analytics, visitor tracking and marketing messages). You can refuse the secondary purposes at any time as described under “Your rights (Mexico)”, and that will not stop us serving you.

If you are in the EU, the EEA or the UK, the GDPR asks us to name a legal basis for each use of your data. Ours are:

• Performance of a contract, or steps you ask us to take before one: handling your bookings and enquiries.
• Legitimate interest: replying to you, keeping the site secure, and aggregate statistics where consent is not required.
• Consent: analytics and tracking cookies for European visitors, and any marketing messages. You can withdraw it at any time.
• Legal obligation: keeping tax and accounting records.

We share personal data only with the service providers named in this policy (HighLevel, Peek, Google and Vercel), who process it on our instructions in order to provide their service to us, and with authorities when the law requires it. Under Mexican law, passing your data to a provider that works on our behalf is a “remisión” and does not need your consent. We make no other transfers of your data to third parties for their own purposes.

We do not sell personal data, and we do not use it for profiling that produces legal effects or similarly significant effects on you.

Mobile numbers and text-message consent are never shared with or sold to third parties or affiliates for their marketing. They are used only by us, through our messaging provider, to send you the messages you agreed to.

The providers named above are based in the United States, so your data is stored and processed there. For visitors from Europe, these transfers rely on the standard contractual clauses in our providers’ agreements and, where the provider is certified, on the EU-US Data Privacy Framework.

• Enquiry and contact records: up to 24 months after our last contact with you, unless you ask us to delete them sooner.
• Booking and sales records: for the period Mexican tax law requires, which is five years.
• Analytics data: Google’s retention setting for our account, which is 14 months.

After these periods we delete the data or make it anonymous.

Under the LFPDPPP you have the ARCO rights: to access the personal data we hold about you, to rectify it when it is inaccurate or incomplete, to cancel it (have it deleted) and to oppose its use for particular purposes. You can also revoke the consent you have given us and ask us to limit how we use or disclose your data, including asking us not to send you marketing messages.

To exercise any of these rights, email info@eltastingroom.mx with your full name, a copy of an official ID or another way of proving your identity (or that you represent the person concerned), a clear description of what you are asking for, and an email address where we can send our reply. We will respond within 20 business days, the period the law sets, and if we agree to your request we will carry it out within the 15 business days that follow.

If you believe we have not handled your data or your request as the law requires, you can file a complaint with Mexico’s federal personal data protection authority (the functions formerly held by INAI, now exercised by the Secretaría Anticorrupción y Buen Gobierno).

If you are in the EU, the EEA or the UK, you have the right to ask for access to your data, to have it corrected or erased, to restrict how we use it, to receive it in a portable format, to object to processing based on our legitimate interests, and to withdraw any consent you have given at any time without affecting what was done before. Email info@eltastingroom.mx and we will reply within one month.

You can change your cookie choices at any time through “Cookie settings” in the website footer. You also have the right to complain to the data protection authority in the country where you live.

We serve alcohol, so El Tasting Room, this website and the services on it are for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us their data, email us and we will delete it.

The site is served over HTTPS, access to your data is limited to the staff who need it to help you, and we work with reputable providers that have their own security measures. No system is perfectly secure, so we cannot promise that nothing will ever go wrong, but we take reasonable care and will inform you, and the authorities, when the law requires it.

Our site links to WhatsApp (Meta), Instagram, Facebook, YouTube (Google), Google Maps and Google reviews. Once you follow one of those links, or use the Peek booking window, that company’s privacy policy applies and we have no control over what it collects. We recommend reading those policies.

When we change this policy we post the new version on this page, with the date at the top. If a change is material we also announce it on the site. Please check back from time to time.

For any question about this policy or your data, email info@eltastingroom.mx, call +52 322 980 1217, or write to El Tasting Room, Panamá 134, Col. 5 de Diciembre, Puerto Vallarta, Jalisco, 48350, México.