Privacy notice

Last updated: November 3, 2026. The Spanish version is the legally binding one.

1. Who is responsible for your data

Hotel Plata Condesa, part of Grupo Hotelero Leyendas, at Callejón de la Condesa 2, Centro Histórico, 36000 Guanajuato, Gto., Mexico, is responsible for your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

2. Data we collect

• Identity and contact: name, phone, email and country.
• Stay details: dates, number of guests, room, special requests and official ID at check-in.
• Invoicing data: business name, tax ID (RFC), tax address and email, if you request an invoice.
• Payment data: captured and processed directly by our booking engine (Cloudbeds) and its payment processors. This website never receives or stores card numbers.
• Messages: what you send us on WhatsApp or tell us by phone.

We do not ask for sensitive personal data.

3. How we use it

Necessary purposes: managing and confirming your booking; check-in and check-out; providing the services of your stay, including breakfast; payment and invoicing; answering your questions, requests and complaints; and meeting legal obligations.

Secondary purposes: sending you Grupo Hotelero Leyendas offers and asking for feedback on your stay. You can opt out at any time by messaging us on WhatsApp; this does not affect your booking.

4. Who we share it with

• Cloudbeds (booking engine) and its payment processors, to process your booking.
• Grupo Hotelero Leyendas hotels in Guanajuato, when they take part in providing services for your stay.
• WhatsApp (Meta), when you choose to contact us there.
• Competent authorities, when the law requires it.

We do not sell your personal data.

5. Your ARCO rights

You can Access, Rectify or Cancel your data, or Object to its use (ARCO rights), and revoke your consent or limit its use. Send your request by WhatsApp or phone to +52 473 734 0942, or deliver it at our address, with your name, a way to reply to you, official ID and a clear description of the data and the right you want to exercise. We reply within 20 business days and, if applicable, act on it within the following 15 business days.

6. Cookies and similar technologies

This site uses no advertising cookies. We store your privacy choice in your browser's local storage. Only if you accept, or tap to view the map, do we load Google Maps content, which may set its own cookies. If we ever measure visits (for example with Google Analytics), it will only run with your consent. You can change your choice at any time from the “Privacy preferences” link in every page footer.

Links to Cloudbeds, WhatsApp, Google and Facebook lead to third-party sites with their own privacy notices.

7. Retention

We keep your data as long as needed for these purposes and for applicable tax and legal obligations, then block and delete it.

8. Changes

We will publish any change on this page, with its update date.