Royal Travel Co.Privacy Notice
Last updated: 3 October 2026
1. Who we are
Royal Travel Co. is a trade name used by Isaac Ruiz, who is the data controller ("we", "us"). Contact: contacto@royaltravelco.com.
2. What we collect
- Identification and contact data: name, phone number, email address.
- Trip request data: places of interest, dates, number of travellers and the preferences you choose to share.
- Communications: messages you send us by WhatsApp, email or social media.
- Payment data: the information needed to issue an invoice and to confirm that a bank transfer was received. We do not collect or store card details.
- Website usage data: only if you accept analytics cookies (see our Cookie Policy).
- Special category data: we do not ask for it. If you choose to tell us about health, dietary or mobility needs, we use it only to plan your trip and only with your explicit consent.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request and preparing a proposal | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Providing the service you hired | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Keeping our communications and systems secure | Legitimate interests (Art. 6(1)(f)) |
| Website analytics | Your consent (Art. 6(1)(a)) |
| Sending news or travel ideas | Your consent (Art. 6(1)(a)) |
For clients in Mexico: the first three purposes are primary purposes, necessary for the service. Analytics and news are secondary purposes; you can refuse them at any time by writing to us, without affecting the service.
4. Who receives it
- Providers that help us operate: WhatsApp and Instagram (Meta), email (Google Workspace), website hosting (Cloudflare), analytics (Google Analytics, only with your consent) and internal workspace tools.
- Travel providers (hotels, operators, transport), only when you ask us to introduce you or to share your request with them.
- Our accountant and tax authorities, where required by law.
We do not sell your personal data.
5. International transfers
Some providers are located outside the European Economic Area. In those cases transfers rely on an adequacy decision, including the EU–US Data Privacy Framework where the provider is certified, or on standard contractual clauses.
6. How long we keep it
- Requests that do not become a service: 12 months after our last contact.
- Clients: for the duration of our relationship and then for the period required by applicable tax and accounting law.
- Consent-based data: until you withdraw consent.
7. Your rights
You can request access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. In Mexico these are your ARCO rights, plus revocation of consent. Write to contacto@royaltravelco.com; we will reply within one month.
You may also complain to the Comissão Nacional de Proteção de Dados (Portugal, www.cnpd.pt), to the data protection authority of your EU country of residence, or to the competent Mexican data protection authority.
8. Other information
We do not make decisions about you based solely on automated processing. Our services are not directed to people under 18.
9. Changes
We will publish any update on this page with a new date.