Privacy Policy

Effective date: October 6, 2026

Ora Hospitality LLC, doing business as Ora Tulum (collectively, “Ora Tulum,” “Ora,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.oratulum.com, communicate with us, submit an inquiry, make a reservation or payment, or otherwise interact with Ora Tulum.

1. Information We Collect

Depending on how you interact with us, we may collect:

• Identity and contact information, such as your name, email address, telephone number, mailing address, and country of residence.
• Reservation and guest information, such as requested retreat dates, accommodation selection, number of guests, age confirmation, travel details, emergency contact information, and special requests.
• Dietary, accessibility, and wellness information, such as food allergies, dietary preferences, accessibility needs, and information you voluntarily provide to help us evaluate or safely deliver requested services. Information collected through a separate health questionnaire or consent form is governed by that form and this Policy.
• Payment and transaction information, such as payment status, billing details, transaction amount, and transaction date. Payment card information is processed by our payment provider; Ora does not intend to store complete payment-card numbers on its own systems.
• Communications, including messages, inquiries, survey responses, feedback, and records of customer-service interactions.
• Device and usage information, such as IP address, browser type, device type, operating system, referring pages, pages viewed, approximate location, and website interaction data.
• Cookie and analytics information, as described in the Cookies section below.

2. How We Collect Information

We collect information:

• directly from you through forms, reservations, payments, questionnaires, emails, telephone calls, text messages, and other communications;
• automatically when you use our website, including through cookies and similar technologies; and
• from service providers and business partners involved in reservations, payments, transportation, communications, analytics, or retreat operations.

3. How We Use Information

We may use personal information to:

• respond to inquiries and provide requested information;
• process reservations, deposits, balances, and refunds;
• arrange accommodations, transportation, meals, wellness activities, and other guest services;
• communicate about reservations, schedules, requirements, changes, and safety matters;
• assess eligibility for particular activities when an assessment is required;
• personalize and improve the guest experience;
• operate, secure, troubleshoot, analyze, and improve our website and services;
• prevent fraud, misuse, and security incidents;
• maintain business, tax, accounting, insurance, and legal records;
• comply with applicable law, court orders, and lawful government requests; and
• send marketing communications where permitted, subject to your right to unsubscribe.

We do not use sensitive wellness or health information for unrelated advertising.

4. How We Share Information

We may share personal information only as reasonably necessary with:

• website hosting and technology providers, which support our website and may store website and visitor data;
• payment processors, which process transactions and conduct fraud prevention;
• operational providers, which support accommodations, transportation, communications, technology, analytics, professional advice, and retreat services;
• retreat facilitators and wellness professionals, when information is reasonably necessary for a requested service, safety assessment, or emergency response;
• government authorities and other appropriate parties, when required by law or reasonably necessary to protect rights, safety, property, guests, staff, or the public; and
• successor entities, in connection with a merger, financing, reorganization, sale, or transfer of all or part of our business.

Service providers may use information only for their authorized services or as otherwise permitted by law. We do not sell personal information for money.

5. Email, Telephone, and Text Communications

When you submit an inquiry, request information, begin or complete a reservation, or provide your contact details for guest services, Ora may use those details to respond and to send communications reasonably related to your request, reservation, payments, transportation, safety, itinerary, or retreat participation.

Where required, we will request consent before sending text messages or marketing communications. Consent to receive promotional messages is voluntary and is not a condition of purchasing or receiving services. Message frequency may vary, and message and data rates may apply.

You may opt out of promotional emails by using the unsubscribe link in the message. You may opt out of text messages by replying STOP. For text-message assistance, reply HELP or contact info@oratulum.com. Opting out of marketing will not prevent Ora from sending necessary transactional, safety, or reservation communications through another available channel.

6. International Data Transfers

Ora Tulum operates in Mexico through a United States company. Your information may be processed or stored in Mexico, the United States, or other countries where our service providers operate. Privacy laws in those locations may differ from those in your home jurisdiction. We take reasonable steps to use appropriate safeguards for cross-border processing.

7. Cookies and Similar Technologies

Our website uses essential cookies required for security, stability, and core functionality. With your consent where required, the website may also use analytics, preference, advertising, or third-party cookies. You can manage non-essential cookies through the website’s cookie banner and through your browser settings. Disabling certain cookies may affect website functionality.

Third-party services and integrations may use their own cookies and process information under their own privacy policies.

With your permission, we use Google Analytics to measure page visits, journey link clicks, and successful inquiry submissions. Google may process cookie identifiers, device and browser information, and usage information. We do not send your inquiry answers, name, email address, or phone number to Google Analytics. Analytics remains off until you choose “Allow analytics.” You may decline or withdraw permission using “Analytics preferences” on our website. See Google’s Privacy Policy.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain reservation and transaction records, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary according to the information and applicable requirements.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, transmission, payment system, or storage method can be guaranteed to be completely secure.

10. Your Privacy Rights

Depending on applicable law, you may have the right to request access to, correction of, deletion of, or objection to certain processing of your personal information; withdraw consent where processing relies on consent; restrict or limit certain uses; receive information about disclosures; or request portability.

To exercise a privacy right, contact info@oratulum.com with the subject line “Privacy Request.” We may need to verify your identity before completing a request. Some information may be retained where permitted or required by law.

You may unsubscribe from marketing emails by using the unsubscribe link in the message or contacting us. Transactional and reservation-related communications may continue when necessary to provide requested services.

11. Children and Age Restrictions

Ora Tulum is an adults-only retreat for guests age 21 and older. Our website and services are not directed to children, and we do not knowingly collect personal information from anyone under 18 through the website. If you believe a minor has provided personal information, contact us so we can review and, where appropriate, delete it.

12. Third-Party Links

Our website may link to third-party websites or services. Their privacy practices are governed by their own policies, and Ora is not responsible for their content or practices.

13. Changes to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with a new effective date. Material changes may also be communicated by other reasonable means.

14. Contact Us

For questions or privacy requests, contact:

Ora Hospitality LLC / Ora Tulum
Email: info@oratulum.com
Website: www.oratulum.com