Privacy Notice

1. Who is responsible for your data?

Transportadora GARF, S. de R.L. de C.V. (tax ID TGA180613LZ8), trading as Qwantour, located in Cancún, Quintana Roo, Mexico, is the data controller responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

For anything related to your personal data, you can write to us at reservas@qwantour.com or reach us by phone or WhatsApp at +52 998 423 3540.

2. What data do we collect?

To provide the transportation service we collect the following data: full name, email address, phone or WhatsApp number, and your flight details (airline, flight number and arrival or departure times).

If you request an invoice, we also collect your billing details: legal or personal name, tax ID (RFC), CFDI use, tax regime and tax address.

We do not collect sensitive personal data. Once card payment becomes available, your card details will be processed directly by the payment provider; Qwantour does not store card numbers.

3. What do we use your data for? (primary purposes)

We use your data for the following purposes, which are necessary to provide the service you hire from us:

1) Providing the ground transportation service you booked, including monitoring your flight to coordinate pickup. 2) Confirming, managing and following up on your booking, including sending the confirmation with your booking reference. 3) Contacting you by email, phone or WhatsApp about matters related to your service. 4) Issuing the corresponding invoice or payment receipt when you request it.

4. Secondary purposes (only with your consent)

Additionally, and only if you give us your consent, we may use your email address to send you promotions, news and offers about our services.

These purposes are not necessary to provide the service: you may refuse them or withdraw your consent at any time without affecting your booking or the quality of the service. Simply write to reservas@qwantour.com or use the unsubscribe link included in every promotional email.

5. Who do we share your data with?

We do not sell or rent your personal data. We only share it, to the extent strictly necessary, with providers that help us operate the service:

1) Openpay (BBVA), our payment processing provider, when you pay by card. 2) Our email provider, to send you confirmations and communications about your booking. 3) The external management system we use to run bookings and operations.

These providers process your data only under our instructions and under confidentiality obligations. We may also disclose data when a competent authority requires it under the law.

Apart from the cases above, provided for in Article 37 of the LFPDPPP, any other transfer will require your consent.

6. Your ARCO rights and how to exercise them

At any time you may exercise your ARCO rights: Access (knowing what data we hold about you and how we use it), Rectification (correcting it if it is inaccurate or incomplete), Cancellation (asking us to delete it when it is no longer needed) and Opposition (objecting to its use for specific purposes).

To exercise them, send an email to reservas@qwantour.com including: your full name, a way to reply to you, a copy of your official ID (or your representative's, with the document proving the representation), a clear description of the data and the right you wish to exercise, and your booking reference if you have one.

We will reply within a maximum of 20 business days from receiving your complete request and, if it is granted, we will carry it out within the following 15 business days.

7. Withdrawing your consent

You may withdraw the consent you have given us for the processing of your data at any time, to the extent permitted by law. Please note that some processing must continue so we can comply with legal obligations (for example, tax obligations) or complete a service already contracted.

To withdraw your consent, write to reservas@qwantour.com following the same procedure described for ARCO rights. To stop receiving promotional emails, simply use the unsubscribe link in any of our emails.

8. Cookies, measurement and similar technologies

Our website uses first- and third-party cookies to work properly and, with your consent, to measure how the site is used with Google Analytics and how effective our advertising is with the Meta pixel. Without your consent, neither of those two tools stores or reads anything on your device.

Separately, we also keep our own usage statistics that do NOT use cookies: nothing is stored on or read from your device, and you cannot be identified or tracked across visits. We record the page visited (without the parameters in the address), the language, the approximate country, the device type (phone, tablet or computer) and the site you arrived from. Your IP address is used only to generate an encrypted identifier that changes every day and is not kept; that identifier lets us count how many distinct people visit us on a given day, and by the next day it can no longer be linked to you. The detail is deleted after 180 days.

The legal basis for these first-party statistics is our legitimate interest in knowing whether the site works and where a booking is abandoned, balanced against your privacy: that is why we do not store your IP address, do not use cookies and do not cross this data with your booking. You may object by writing to reservas@qwantour.com, and we automatically honour the Global Privacy Control signal if your browser sends it.

You can find the details of each cookie, its duration and how to manage your preferences in our Cookie Policy, available on this website.

9. How do we protect your data?

We apply reasonable administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use: encrypted transmission (HTTPS), access limited to the staff who need the data to handle your booking, and providers that meet recognized security standards.

We keep your data only for as long as necessary for the purposes described and to comply with applicable legal obligations; after that, we delete or anonymize it.

10. Changes to this notice

This notice may change to reflect legal developments or changes to our service. We will always publish the current version on this website, with its update date visible at the top of the document.

If a change substantially affects how we process your data, we will inform you through the contact details you have provided before it takes effect.

11. Competent authority: INAI

If you believe your right to personal data protection has been violated and you are not satisfied with our response, you may turn to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), the competent authority on this matter in Mexico. More information at www.inai.org.mx or by phone at 800 835 4324.