Privacy Policy
Last updated: April 7, 2026 · Lion Heart Sport Fishing · Cabo San Lucas, Baja California Sur, Mexico
Lion Heart Sport Fishing ("Lion Heart," "we," "us") operates lionheartcabo.com. This Privacy Policy explains how we collect, use, and protect your personal information. By using our website or booking a charter, you agree to these terms. This policy is designed to comply with Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
1. Information We Collect
- Identity & Contact: First name, last name, email address, phone number
- Booking Details: Charter type, date, guest count, add-on preferences
- Payment: Stripe processes all card payments — we never see or store your card number
- Technical: IP address, browser type, pages visited via server logs
- Newsletter: First name, last name, and email if you opt in
2. How We Use Your Information
- To confirm and manage your charter booking
- To process your deposit via Stripe
- To send booking confirmation and reminder emails
- To send newsletters if you have opted in (unsubscribe any time)
- To respond to inquiries via email or WhatsApp
- To improve our website and services
- To comply with legal obligations in Mexico and internationally
- To protect our legal rights including in payment disputes or defamation claims
3. Legal Basis for Processing (GDPR)
- Contract performance: Fulfilling your booking
- Legitimate interests: Business communications, fraud prevention, legal protection
- Consent: Newsletter subscriptions (withdrawable at any time)
4. How We Share Your Information
We do not sell your personal data. We share it only with:
- Stripe Inc. — payment processing
- HubSpot Inc. — CRM and contact management
- SendGrid (Twilio) — email delivery
- Google LLC — calendar integration and reCAPTCHA security
- Legal authorities — where required by Mexican or US law
5. Data Retention
Booking and contact data is retained for up to 3 years. Newsletter data is retained until you unsubscribe. You may request deletion at any time subject to legal retention requirements.
6. Your Rights
- Access, Correction, Deletion of your personal data
- Opt-out of marketing at any time
- Portability of your data (GDPR)
- ARCO Rights (LFPDPPP — Mexico): Access, Rectification, Cancellation, Opposition
- CCPA: California residents may request disclosure of data collected — we do not sell data
To exercise any right, email [email protected]. We respond within 30 days.
7. Cookies & Tracking
- Google reCAPTCHA v3 — invisible bot detection on the booking form
- Stripe.js — secure payment processing
- Server logs — standard access logs for security and performance
We do not use advertising cookies, Facebook Pixel, or Google Analytics.
8. Security
We protect your data with HTTPS/SSL encryption via Cloudflare, reCAPTCHA v3 bot protection, Cloudflare WAF, and Stripe for payment security.
9. International Transfers
Your data may be processed in the United States by Stripe, HubSpot, SendGrid, and Google, subject to appropriate safeguards including Standard Contractual Clauses where required under GDPR.
10. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy periodically. The "Last updated" date reflects any changes. Continued use of our site constitutes acceptance.
12. Contact Us
This Privacy Policy was last reviewed April 2026. Lion Heart Sport Fishing is committed to protecting your privacy under Mexican, US, and EU law. For legal advice specific to your situation, consult a qualified attorney.