Cities and Wines of Mexico: Full Privacy Notice

9. If you create a fan account

Section pending legal review.

Data we handle: your email; your password, of which we keep only an encrypted fingerprint (scrypt with an additional secret key) that cannot be read or recovered: no one on the team can see it; your public name; your statement that you are 18 or older; whether you work in the wine sector and with which wineries; optionally, how you describe yourself and your state of residence; your opinions (ratings, text, month and type of visit, useful data) and the photos you add to them, with their description; if you created your account with another member's link, who invited you; your passport lists, the places you save in your route and the welcome glasses you redeem (at which business and when); the reports, appeals and requests you send us, and pseudonymized technical data: an encrypted fingerprint (HMAC) of your IP address and of an identifier stored in a security cookie, with the access dates, whether you signed in with a password or with a code, and failed password attempts.

Security of your account: you sign in with your password or with a code we send you by email. After 10 failed attempts in a row we pause password sign-in for an hour and let you know. We also email you when you create or change your password and when someone signs in with it from a browser we had not seen. In Seguridad de tu cuenta (in Spanish) you see your open sessions and your latest accesses, and close the ones you do not recognize.

Necessary purposes: create and maintain your account and give you access; publish your opinions under your public name; calculate averages, levels (with the help of the friends you invite) and the Fans' Choice; moderate content; prevent fraud, multiple accounts and conflicts of interest; apply usage limits; handle reports, appeals, legal requests and ARCO rights, and meet legal obligations. We do not use your data for advertising or send you newsletters. When you create your account we send you a welcome email with what it includes.

Photos in your opinions (voluntary): if you add photos to an opinion, we store each image, its description and the date. When you upload it we remove the location data (GPS) and the other metadata (EXIF) from the image, and store a new copy. A member of the team reviews it before it is published. It is published next to your opinion and your public name, only where opinions are published, and may appear on our social networks with your public name, under the "Photos in your opinions" license of the Política de contenido (in Spanish). You can delete it whenever you want from your account. Approved photos count toward your level.

Invite your friends (voluntary): each member has a personal link to invite; we never ask for or store your friends' email: you share your link. If someone creates their passport with your link, we store that you invited them; it does not change. You and your friend see, of each other, only the public name, the level and whether they are active (whether they have already published an opinion with an approved photo); never the email or the opinions that are not published. We use it to calculate your level: each active friend helps you move up. To prevent abuse: if both emails are on the same domain (except public providers such as Gmail, Hotmail, Outlook, Yahoo or iCloud), we do not store the invitation; and we compare the encrypted fingerprint of the connection with which the account was created with those of the inviter's accesses in the 24 hours before or after: if they match, the invitation does not count toward the level.

Welcome glass (voluntary): when you redeem it we record at which business and at what time, so that it is one a year at each place and to show it to you in your passport. To the business we give only how many glasses were redeemed each month, never by whom. If you review a winery where you redeemed it in the previous 12 months, your opinion carries the label "Received a welcome glass" and counts in the average.

Moderation with artificial intelligence: each opinion, edit, winery reply, appeal and report is first reviewed by an artificial intelligence system from Anthropic, PBC (United States), acting as a processor on our behalf, only for that review. We send it the text of the opinion or reply, the ratings, the month and type of visit, the name and region of the winery and what it offers according to its profile; in an appeal, your explanation, and in a report, the reason chosen. We never send it your email, your public name, your IP address, the encrypted fingerprints, your level or data about the winery's plan. The decision is recorded with its reason; what is doubtful, the appeals it does not reverse, legal notices and sanctions are decided by a person.

What is public: your public name and your level; the month and year you registered; your published opinions, with their labels and their approved photos; your passport by region, and, if you choose, how you describe yourself and your state. Your profile is not indexed by search engines and you can hide it. Your email is never published or given to wineries.

Community cookies: the session cookie, 30 days; a security cookie that identifies your browser after you sign in, 180 days, which stays even if you sign out and is used to detect abuse; and two temporary ones: your code request (30 minutes) and your opinion draft (48 hours).

Retention: your password fingerprint, while you have your account; sessions, 30 days; access requests, 1 day; unconfirmed drafts, 48 hours; encrypted fingerprints and access dates, 90 days; limit events, 8 days; text of opinions not published or removed by moderation, 12 months; reports, appeals, legal notices, files and log, 2 years; queued emails, 30 days; places saved in your route and welcome glasses redeemed, while you have your account; photos of your opinions, while the opinion stays published or under review and you do not delete them (when the opinion is removed they are deleted with it); rejected photos, 30 days; who invited you, while you have your account. If you delete your account, we remove your opinions and your profile at once, and block your data for 30 days before deleting it (12 months for the encrypted email if there was a sanction or an open case). We keep only what an open claim or an authority's order requires.

Processors: Hostinger (hosting, database and email), our email provider and Anthropic (automatic review of content). There are no transfers: wineries see the same as the public and authorities receive data only with a founded request.

Your rights: from Mi cuenta (in Spanish) you download your data, correct your profile, hide it and delete your account. You can also write to [email protected] from the email of your account. We answer within the legal period and aim to do it within 10 business days.

Age: the community is only for people over 18. If we learn that an account belongs to a minor, we delete it with its content.

If your business is in the guide

In force since October 3, 2026.

This section is for the people who handle the email or the phone of a business listed on Cities and Wines of Mexico (a winery, a hotel, a tour, a bar, a wine shop, a restaurant, an event venue or an event organizer) and for those who represent it in the guide. The controller is the one in section 1.

What data we handle and where it comes from

• The email and the contact phone that your business publishes on its website, on its social networks, in a tourism or industry directory, or on another public web page. We store where and on what date we took each address. It may be a general address of the business or a person's.
• What you give us: your name, your position, your phone, the best time to call you and what you ask us.
• The correspondence with your business: the emails we send you, as they went out, and the ones you answer, as text. Attachments stay in our mailbox; in our system we store only their name.
• The meetings you schedule: date, time, channel, name, position, phone and note.
• The calls we make to you: date, who we spoke with (by position), the result and what you tell us about your business. We do not record them.
• What happens with our emails and with the presentation (below, "What we record").

What we use them for

• Present the guide and your business's page to you, and offer you the account for your business, which is free, and the paid plans.
• Let you know about the inquiries that fans write to your business from the guide, with their date and topic.
• Follow up with you: answer what you write to us, call you during business hours, schedule and hold meetings and send you the information you ask for.
• If your business has an account, invite you to buy a plan or move up to the next one, and send you the monthly newsletter.
• Decide what we write to you next and who on our team handles you, with what we record.
• Order the businesses in the guide's listings, in the part that does not depend on any payment, also with what we record about your business.
• Keep a suppression list so that we do not write advertising to you again if you unsubscribe.

What we record about our emails and the presentation

Our emails carry no tracking images. We record the clicks on the links of each email, when the page you reach confirms them; if you open the presentation from your personal link, when you open it, which slides you see, for how long and whether you download it; and the replies you send us. We do this without cookies and without storing your IP address. If another person opens a link we sent you, we record it the same way, tied to your business.

Who we share them with

With the Cities and Wines of Mexico team that handles your business, including, when there are any, sales advisers who work on our behalf under a duty of confidentiality; if you already represented your business before we published this section, an adviser handles you only if you accept it in your panel. With providers that process them on our behalf: Hostinger (email and hosting) and, if it fails, Brevo (service emails), Google (calendar and, if the meeting is on Meet, the video call) and Cloudflare (the protection against bots on our forms). Some are outside Mexico. We never give your email or your data to other businesses or to fans, and we do not sell them.

How long we keep them

We keep them while your business is in the guide or while we have a relationship with you. No process deletes them on its own: every three months we review by hand what is no longer needed and delete it. If you unsubscribe we do not delete anything: we note the date and how you asked us, and keep your address on the suppression list so that we do not write advertising to you again, even if we find it again in a public source.

How to say no

You can object to receiving commercial emails whenever you want and at no cost: with the unsubscribe link in each email, by replying "baja" or by writing to us at the email in section 1. Unsubscribing applies at once and stops the commercial emails; the notices of your business's inquiries keep coming, without advertising, and each one carries its own link to stop receiving them. If you do not want us to call you, tell us and we note it in our "do not call" record. If we write to an address that does not belong to that business, tell us: we stop writing to you and correct the guide. For access, rectification, cancellation or objection, section 6 applies.