Your privacy
The short version: we only collect what we need to answer you and host your stay, we don't sell your data, and you can ask us to delete it at any time.
Rehan Ishrat, operating Casa de Mango in Litibú, Nayarit, Mexico, is the person responsible for your personal information under Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares.
For any privacy question or request, write to hola@casademango.com.mx. We reply personally, usually within a few business days.
Your name, email, phone (optional), the unit and dates you're interested in, number of guests, and anything you tell us in the message field.
Payment details handled by the payment processor (we don't store card numbers), arrival details you share to coordinate check-in, and any invoicing information you provide for a factura.
Basic technical data your browser sends (IP address, device type, referring page) for site security and to understand which pages are useful. We do not use advertising trackers.
The main purpose — answering questions, sending quotes and confirming bookings.
Coordinating check-in, arranging extras you've asked for and keeping records required by Mexican tax and lodging law.
Understanding aggregate patterns — never to profile individual visitors or sell data.
We use Resend to send booking confirmations and notifications. Your name and email pass through their servers so the emails can be delivered.
Your inquiry is stored in our database, hosted on Lovable Cloud, which uses Supabase infrastructure. Data is encrypted in transit and at rest.
When you pay a deposit or balance, the payment processor handles your payment details directly under their own privacy policy. We only receive confirmation that the payment cleared.
We disclose data only when required by Mexican law or a lawful order — for example, a request from tax or immigration authorities.
We do not sell, rent or trade your personal information to anyone.
Up to 5 years after your last contact with us. This matches Mexican tax record-keeping requirements and helps us honor return guests.
Data is deleted or anonymized. You can ask us to delete your information earlier — see your rights below.
Under Mexican law you can ask us: what data we hold about you (Access), to correct it (Rectification), to delete it (Cancellation), or to stop using it for a specific purpose (Objection). Email hola@casademango.com.mx with your request and we'll reply within 20 business days.
You can withdraw your consent at any time. Some records may still need to be kept to meet tax and legal obligations.
The site runs over HTTPS. Data is encrypted in transit and at rest. Access to the inquiry database is limited to Rehan and required team members.
Please don't send us sensitive information (passport numbers, card numbers) through the inquiry form — we'll ask for it through a secure channel when needed.
Only technical cookies needed to make the site work (like remembering your language). No advertising or cross-site tracking cookies.
We may update this page as the site evolves. Significant changes will be noted at the top of the page. This version is effective July 2026.