Privacy Policy

This Privacy Policy explains how The Light Society ("The Light Society", "we", "us") collects, uses and protects personal data through this website and through the software and mobile applications we publish, including Dr. Alfred (together, the "Services").

1. Who is responsible

The Light Society, with address at [BUSINESS ADDRESS], Mexico, is responsible for the personal data described in this policy. Contact: info@thelightsociety.mx.

2. Data we collect

Data you give us: name, email, phone number, reservation details, preferences, requests and messages you send through the Services.

Data from hotels: when a hotel or resort uses our platforms, it may share guest data needed to provide the service.

Device and usage data: device model, operating system, app version, IP address, diagnostics and crash logs.

Location: only if you grant permission on your device.

Payments: processed by third-party providers such as Stripe; we do not store full card numbers.

3. How we use it

To provide and operate the Services; to process your requests, orders and reservations; to communicate with you about the Services; to keep the Services secure and prevent fraud; to understand and improve performance; and to comply with legal obligations. We do not sell personal data and do not use it for third-party advertising.

4. Hotels and business customers

When we process guest data on behalf of a hotel, resort or other business customer, that customer is the data controller and we act as its processor, following its instructions. Its own privacy notice also applies.

5. Who we share it with

The property you are staying at or interacting with; service providers that help us run the Services (hosting, payments, messaging such as WhatsApp and email, analytics and support), bound by confidentiality; and authorities when required by law. Some providers may be located outside Mexico; we require them to protect your data.

6. Retention

We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymize it.

7. Your rights and account deletion

You may access, rectify, cancel or oppose the processing of your personal data (ARCO rights under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties), withdraw consent, and request deletion of your account and data. Where other laws apply (such as the GDPR or CCPA), you have the rights they grant. Write to info@thelightsociety.mx from the email linked to your account; we will respond within 20 business days.

8. Security

We use administrative, technical and physical safeguards, including encryption in transit and access controls. No system is completely secure, but we work to protect your data and will notify you as required by law if a breach affects you.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal data.

10. Cookies

This website does not use advertising or tracking cookies. Our apps may use local storage strictly necessary for them to work.

11. Changes

We may update this policy. We will post the new version here with its date and, if changes are significant, notify you through the Services.

12. Contact

Questions or requests: info@thelightsociety.mx