Tulum Cenotes Tours › Privacy Policy
This site is a set of static pages. It has no accounts, no forms, no newsletter, no comments and no shopping basket, so there is almost nothing to collect and nothing is collected. What follows is the full picture rather than a template.
Nothing. There is no analytics package on these pages, no advertising network, no tag manager, no heatmap or session recorder, no embedded video, no social widgets, no chat tool, and no first-party cookie of any kind. Nothing on this site asks for your name, your email address or your location, because there is nowhere to put them.
If you open the page source you can confirm it: the only scripts are a menu toggle that runs in your browser and structured-data blocks that describe the page to search engines. Neither sends anything anywhere.
Like every website, this one is served by a hosting company whose servers keep standard access logs — the requesting IP address, the time, the page requested and the browser string. These are generated by the act of serving a page and are used for security and diagnostics. They are not linked to anything else, because there is nothing else to link them to.
Two small verification files sit at the root of this site, one for Google Search Console and one for Bing Webmaster Tools. They are static files that prove ownership of the domain. They contain no code, set no cookie and do not run when you visit a page. The reports those tools produce are aggregate and anonymous: which search terms led here, how many clicks, which pages. No individual is identifiable in them.
Pages about an individual cenote include a location map supplied by Google Maps. The map is loaded from Google’s servers when the page opens, which means Google receives the request and may set its own cookies under its own privacy policy. It is embedded with deferred loading, so on most browsers it is not fetched at all until you scroll to it, and it is present only on individual cenote pages — not here, the homepage, the blog or anywhere else.
Nothing is passed to Google about you beyond what any request for an image or a script carries. There is no account, no login and no personalisation attached to it.
This is the only part that touches you directly, and it happens only if you choose it. When you click a booking button, you leave this site for Viator. At that point Viator sets its own cookies, applies its own privacy policy and handles any personal data involved in a booking — your name, payment details and travel dates never pass through this site and are never visible to it. One of those cookies records that you arrived from here, which is how the commission described on the affiliate disclosure is attributed. It carries no personal information about you.
If you do not click a booking link, no third party learns anything about your visit beyond the host’s server log.
Under the GDPR, the UK GDPR, the CCPA and comparable laws you have rights to access, correct, port and erase personal data held about you. In practice there is nothing here to exercise them against: this site holds no personal data, no mailing list and no user records. If you have booked a tour, the data lives with the booking platform and the operator, and requests should go to them.
This site is written for adults planning a trip and does not knowingly collect anything from anyone, of any age.
It changes when the site does. The map embeds described above were added to this page on the day the first cenote page carrying one was published, rather than afterwards — which is the standard this page is held to.
If an analytics tool, a consent banner or a newsletter is ever added, this page will say so in plain terms on the same day. Questions about any of it: see contact.