Privacy Policy & Cookies
Casa Kronos respects your privacy and is committed to protecting your personal data.
This Privacy Policy describes how Casa Kronos collects, uses, and protects the information you provide when you use our website (accessible at www.casakronos.com, including any mobile-optimized version) or interact with us directly through booking platforms such as Airbnb or Vrbo, messaging, payments, or other forms of communication (the “Services”). It also explains how cookies and tracking technologies are used, and outlines your rights under applicable data protection laws in the United States, Canada, Mexico, and the European Union, and the United Kingdom.
This policy applies to all online services and communications provided by Casa Kronos (referred to as “Casa Kronos,” “we,” “us,” or “our”) and is intended to supplement any terms or agreements specific to bookings or services provided. It does not apply to external websites or third-party platforms with separate privacy policies that do not link to or reference this one (for example, Airbnb or Vrbo’s own privacy statements).
We encourage you to review this policy carefully so that you can understand how your personal information is handled and feel confident when interacting with our services.
1. Who This Policy Applies To
2. Information We Collect
We collect information in the following ways:
A. Information You Provide to Us
When you:
- Submit a contact form
- Inquire about or request a booking
- Make a payment
- Communicate via email or other channels
We may collect:
- Nombre
- Email address
- Phone number
- Country of residence
- Guest details (e.g. travel dates, number of guests)
- Special requests
- Payment-related details (processed via third-party providers like Smoobu or payment gateways)
B. Information Collected Automatically
We may automatically collect:
- IP address
- Device and browser type
- Geographic location
- Website usage (pages viewed, time spent)
- Referral source (e.g., Airbnb, Vrbo, Google search)
Collected using:
- Google Analytics
- Cloudflare
- Facebook Pixel
- Google Ads conversion tracking
3. Third-Party Tools and Services
We use the following third-party tools, which may collect or process your data under their own privacy policies:
A.Smoobu (https://www.smoobu.com)
Used to manage bookings, send communication, and process payments. Data you provide during a direct booking (such as name, email, payment details) is securely managed through Smoobu.
B. Google Services
Google Analytics: To analyze website traffic
Google Ads: To display targeted advertisements
Google may collect anonymized data and use cookies. You can opt out via Google Ads Settings or install the Google Analytics opt-out browser add-on.
C. Facebook Pixel / Meta Ads
Used for targeted advertising and remarketing through Facebook and Instagram. Data is used in aggregate unless you’ve interacted with our ads.
D. Cloudflare
Used for website speed, optimization, and security (e.g., blocking malicious traffic). Cloudflare may log your IP and browser for these purposes.
E. Airbnb and Vrbo
If you book through Airbnb or Vrbo, your personal data is handled in accordance with their respective privacy policies. We do not control how they process your data but may access limited booking details for guest communication and coordination.
4. How we use your information
We use the personal information we collect for the following purposes:
A. To Manage Bookings and Guest Communication
- Responding to inquiries submitted through our website, Airbnb, Vrbo, or other channels
- Processing and confirming reservations
- Sending booking-related messages, check-in details, and follow-up information
- Coordinating availability and avoiding double-bookings via calendar syncing tools such as Smoobu
B. To Process Payments
- Facilitating secure payments through trusted platforms
- Confirming payment status and handling any billing issues
- Retaining necessary records for tax and accounting purposes
Note: We do not store your full payment card information directly. Payments are processed through third-party systems that use industry-standard encryption.
C. To Provide Customer Support
- Answering questions, addressing concerns, and assisting with logistics before, during, or after your stay
- Responding to rights requests related to your data
D. To Improve and Personalize Your Experience
- Remembering your preferences such as language or location
- Showing relevant content based on how you use the site
- Improving navigation, loading speed, and mobile responsiveness
E. To Analyze Site Usage and Optimize Performance
- Monitoring traffic patterns and site usage using Google Analytics
- Understanding what pages are visited, how long users stay, and where they come from
- Identifying and resolving usability issues
F. To Deliver and Measure Advertising
- Showing ads to interested users through platforms like Google Ads and Facebook/Instagram (Meta)
- Retargeting past visitors who showed interest but didn’t complete a booking
- Measuring ad performance and audience engagement
- Doing so in compliance with applicable laws, including consent requirements in Canada and Mexico
G. To Maintain Security and Prevent Fraud
- Monitoring for unauthorized access, bots, or malicious traffic via Cloudflare and server-level firewalls
- Taking steps to protect your information and the integrity of our systems
H. To Comply with Legal Obligations
- Meeting requirements under tax, financial, and consumer protection laws
- Responding to valid legal requests or court orders
- Maintaining accurate business and guest records
I. To Send Optional Marketing Communications (if consented or permitted)
- Sending promotional emails or special offers related to the property
- Asking for feedback or guest reviews
- You can unsubscribe at any time by clicking the link in the email or contacting us directly at hola@casakronos.com
We do not sell your personal data to third parties. We only share information as needed to operate our services, process bookings, run advertising campaigns, or comply with legal obligations.
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or UK, we process your data based on the following legal grounds:
- Your consent (e.g., opting into marketing)
- Performance of a contract (e.g., completing your reservation)
- Legal obligations
- Legitimate interests (e.g., improving services)
6. Your Rights
A. EU/UK Residents – GDPR
You may:
- Request access to your personal data
- Request correction or deletion
- Object to or restrict processing
- Request data portability
- Withdraw consent (where applicable)
B. United States (California Residents – CCPA)
You have the right to:
- Know what personal data we collect
- Request deletion of your data
- Opt out of the sale of your data (we do not sell data)
- To exercise your rights, email us at hola@casakronos.com with the subject CCPA.
C. Canada (PIPEDA)
Canadian residents have the right to:
• Access or correct their personal data
• Withdraw consent (where applicable)
• Request deletion of their information
To request, contact us at Hola@casakronos.com with the subject PIPEDA.
D. Mexico (Federal Law on Protection of Personal Data)
You may request to:
• Know what personal data we have
• Request correction or cancellation
• Object to the use of your data for marketing
Send your request to Hola@casakronos.com with the subject LFPDPPP .
7. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to improve your experience, analyze traffic, and serve personalized ads. By using our site, you consent to the use of these technologies unless you opt out or disable them via your browser.
A. What Are Cookies?
Cookies are small text files stored on your device by your browser. They help websites remember your preferences and improve performance.
B. Types of Cookies We Use
• Essential Cookies :These are required for basic website functionality and security, including Cloudflare cookies that help prevent attacks or detect bot activity.
• Performance & Analytics Cookies: We use Google Analytics to track how visitors interact with our site (e.g., pages visited, time on site, bounce rate) so we can improve usability.
• Advertising & Remarketing Cookies: We use Google Ads and Facebook Pixel to show targeted ads based on your activity on our site and across the web. These tools may track actions such as page visits or form submissions.
• Functionality Cookies: These help remember preferences (like your language or location) and improve the user experience.
C. Third-Party Cookies and Tracking Tools
The third-party services we use may set their own cookies or tracking pixels:
• Google Analytics & Google Ads (Google LLC): For web analytics and ad personalization. Google may use cookies to display ads based on your previous visits. Learn more and opt out: https://adssettings.google.com
• Facebook Pixel (Meta Platforms, Inc.): For serving targeted ads on Facebook/Instagram. More info and opt out: https://www.facebook.com/adpreferences
• Cloudflare: Cloudflare may use cookies for security purposes, such as identifying malicious visitors or reducing server load.
D. Managing Cookies
Most web browsers allow you to control or disable cookies through your browser settings. You can also opt out of certain third-party tracking via:
• Google Opt-Out Tool: https://tools.google.com/dlpage/gaoptout
• Facebook Ad Preferences: https://www.facebook.com/adpreferences
• YourAdChoices (U.S.): https://optout.aboutads.info
• Digital Advertising Alliance of Canada: https://youradchoices.ca
• Mexican Users: Use browser-level opt-outs or private browsing mode
If you disable or reject cookies, some features of the website may not function properly.
E. Cookie Consent
When you first visit our site, you may see a banner or notification about cookie usage. By continuing to use the site, you accept our use of cookies unless you take steps to disable them.
8. Data Retention
We retain personal data only as long as needed to fulfill your booking, meet legal requirements, or for legitimate business purposes. Booking information through Smoobu or Airbnb/Vrbo is subject to their retention policies. Including:
- Managing and confirming bookings
- Providing customer support
- Meeting legal, accounting, or tax requirements
- Improving our website and marketing efforts
- Complying with applicable contracts, regulations, or platform requirements (e.g., Airbnb, Vrbo)
A. Retention Periods by Type of Data
| Data Type | Retention Period |
|---|---|
| Booking & Guest Information | Up to 7 years (for legal/tax compliance) |
| Contact Form Submissions | 12-24 months (unless follow-up needed) |
| Marketing & Newsletter Consent | Until user opts out or withdraws consent |
| Payment Confirmation Data | 7 years (to comply with accounting/tax laws) |
| Website Analytics (google, Meta) | 26 months (default Google Analytics settings) |
| Cookies and Tracking Data | Based on your browser and service settings |
9. Data Security
We take data security seriously and implement a range of technical, administrative, and physical safeguards to help protect your personal information from unauthorized access, misuse, disclosure, or loss.
A. Technical Measures
- SSL Encryption: All communication through our website is protected using HTTPS/SSL encryption to secure data in transit.
- Secure Hosting: Our site is hosted by reputable providers with up-to-date server security, firewall protections, and intrusion detection systems.
- Cloudflare Security: We use Cloudflare to help protect against DDoS attacks, malicious traffic, and unauthorized bots.
B. Administrative Controls
- Access to personal information is limited to authorized individuals who need it to perform operational or customer service duties.
- We use secure logins and password protection on tools such as Smoobu and third-party platforms that store booking and communication data.
C. Third-Party Service Providers
We work only with third-party services that follow their own strong data protection practices, including:
- Smoobu, for booking and guest messaging
- Payment processors (through platforms like Airbnb, Vrbo, or Stripe if applicable)
- Google and Meta, for analytics and advertising, who follow strict global data handling standards
We do not store your payment card details directly on our site. All financial transactions are processed through secure third-party providers.
D. Incident Response
In the unlikely event of a data breach, we will:
- Investigate the incident promptly
- Notify affected users if required by applicable laws
- Take all necessary steps to minimize damage and prevent future breaches
E. User Responsibility
While we take appropriate security measures, you are responsible for keeping your own devices secure and using secure networks when accessing our website or submitting information.
10. Children’s Privacy
Our website and services are not intended for children under the age of 13, and we do not knowingly collect or solicit personal data from anyone under 13 years of age.
If you are under 13, please do not submit any personal information through this site, such as your name, contact details, or booking inquiries.
If we become aware that we have collected personal information from a child under 13 without verified parental or legal guardian consent, we will take immediate steps to delete that information from our records.
Parents or guardians who believe their child may have submitted personal data may contact us at hola@casakronos.com to request removal.
In accordance with applicable laws in Canada and Mexico, we also do not knowingly collect personal information from minors without express, verifiable consent from a parent or legal guardian. If your jurisdiction defines a higher age threshold for consent, we will honor that local law.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service providers.
When we make changes, we will:
• Post the updated policy on this page
• Revise the “Effective Date” at the top of the page
In some cases, we may also notify you directly if the changes are significant (such as changes to how we collect or use your personal information).
By continuing to use our website or services after updates are posted, you acknowledge and agree to the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
English 
Español de México