Privacy Notice

1. Who is responsible for your data?

Transportadora GARF, S. de R.L. de C.V. (tax ID TGA180613LZ8), trading as Qwantour, located at Insurgentes Alfredo V. Bonfil, Manzana 265, Lote 1, Supermanzana 307, Casa La Ceiba, C.P. 77500, Benito Juárez, Quintana Roo, Mexico, is the data controller responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

For anything related to your personal data, you can write to us at booking@qwantour.com or reach us by phone or WhatsApp at +52 998 423 3540.

2. What data do we collect?

To provide the transportation service we collect the following data: full name, email address, phone or WhatsApp number, and your flight details (airline, flight number and arrival or departure times).

If you request an invoice, we also collect your billing details: legal or personal name, tax ID (RFC), CFDI use, tax regime and tax address.

For card payments, Openpay.js sends the cardholder name, card number, expiry and CVV directly to Openpay and returns a token. Our servers do not receive or store the full card number or CVV; they retain references, amount, status and transaction details returned by the gateway, which may include the card brand and masked number.

To protect transactions we use technical browser data, a device identifier and an IP hash. When a payment starts, we send the IP and device session identifier to Openpay for fraud prevention; the provider applies its own privacy notice. Security data does not constitute consent to advertising.

3. What do we use your data for? (primary purposes)

We use your data for the following purposes, which are necessary to provide the service you hire from us:

1) Providing the ground transportation service you booked, including monitoring your flight to coordinate pickup. 2) Confirming, managing and following up on your booking, including sending the confirmation with your booking reference. 3) Contacting you by email, phone or WhatsApp about matters related to your service. 4) Issuing the corresponding invoice or payment receipt when you request it.

We also process data needed to authorize and reconcile payments, prevent fraud, handle cancellations, refunds and disputes, and retain evidence of the booked service.

4. Secondary purposes (only with your consent)

Additionally, and only if you give us your consent, we may use your email address to send you promotions, news and offers about our services.

These purposes are not necessary to provide the service: you may refuse them or withdraw your consent at any time without affecting your booking or the quality of the service. Simply write to booking@qwantour.com or use the unsubscribe link included in every promotional email.

5. Who do we share your data with?

We do not sell or rent your personal data. We only share it, to the extent strictly necessary, with providers that help us operate the service:

1) Openpay, our payment processing provider, when you pay by card. 2) Our email provider, to send you confirmations and communications about your booking. 3) The external management system we use to run bookings and operations.

Openpay and the financial institutions involved in the payment process information under their legal obligations and their own privacy notices. Providers acting on Qwantour’s instructions are subject to confidentiality obligations. We may disclose data when required by a competent authority.

Disclosures necessary for the contractual relationship or legal obligations follow applicable law. For other transfers requiring consent, we will request it.

• Openpay privacy notice

6. Your ARCO rights and how to exercise them

At any time you may exercise your ARCO rights: Access (knowing what data we hold about you and how we use it), Rectification (correcting it if it is inaccurate or incomplete), Cancellation (asking us to delete it when it is no longer needed) and Opposition (objecting to its use for specific purposes).

To exercise them, send an email to booking@qwantour.com including: your full name, a way to reply to you, a copy of your official ID (or your representative's, with the document proving the representation), a clear description of the data and the right you wish to exercise, and your booking reference if you have one.

We will reply within a maximum of 20 business days from receiving your complete request and, if it is granted, we will carry it out within the following 15 business days.

7. Withdrawing your consent

You may withdraw the consent you have given us for the processing of your data at any time, to the extent permitted by law. Please note that some processing must continue so we can comply with legal obligations (for example, tax obligations) or complete a service already contracted.

To withdraw your consent, write to booking@qwantour.com following the same procedure described for ARCO rights. To stop receiving promotional emails, simply use the unsubscribe link in any of our emails.

8. Cookies, measurement and similar technologies

Our website uses first- and third-party cookies to work properly and, with your consent, to measure how the site is used with Google Analytics and how effective our advertising is with the Meta pixel. Without your consent, neither of those two tools stores or reads anything on your device.

Separately, we also keep our own usage statistics that do NOT use cookies: nothing is stored on or read from your device, and you cannot be identified or tracked across visits. We record the page visited (without the parameters in the address), the language, the approximate country, the device type (phone, tablet or computer) and the site you arrived from. Your IP address is used only to generate an encrypted identifier that changes every day and is not kept; that identifier lets us count how many distinct people visit us on a given day, and by the next day it can no longer be linked to you. The detail is deleted after 180 days.

The legal basis for these first-party statistics is our legitimate interest in knowing whether the site works and where a booking is abandoned, balanced against your privacy: that is why we do not store your IP address, do not use cookies and do not cross this data with your booking. You may object by writing to booking@qwantour.com, and we automatically honour the Global Privacy Control signal if your browser sends it.

You can find the details of each cookie, its duration and how to manage your preferences in our Cookie Policy, available on this website.

When card payment is available, Openpay.js and openpay-data.js generate a device session identifier and collect technical information for tokenization and fraud prevention. They may use cookies or other identification technologies necessary to secure the payment. These differ from optional advertising cookies; blocking them may prevent online payment. Their scope and retention are explained in Openpay’s privacy notice.

9. How do we protect your data?

We apply reasonable administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use: encrypted transmission (HTTPS), access limited to the staff who need the data to handle your booking, and providers that meet recognized security standards.

We keep your data only for as long as necessary for the purposes described and to comply with applicable legal obligations; after that, we delete or anonymize it.

10. Changes to this notice

This notice may change to reflect legal developments or changes to our service. We will always publish the current version on this website, with its update date visible at the top of the document.

If a change substantially affects how we process your data, we will inform you through the contact details you have provided before it takes effect.

11. Data protection authority

You may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the authority for personal data held by private parties, if you believe your rights have been infringed. Consult its official channels and procedures.

• Secretaría Anticorrupción y Buen Gobierno