Your privacy at York Adventures.

Last updated: November 2026

York Adventures (“we,” “us,” or “our”) operates yorkadventures.com, a travel photography portfolio that licenses images by inquiry, runs a Mexico Club referral program, publishes a blog, and offers an email newsletter. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using this site you agree to the practices described here.

Information we collect

We collect only what we need to run the site and fulfill your requests:

Newsletter email. When you request a free guide or subscribe to our email list, we collect your email address and, optionally, your name.
Contact & inquiry messages. When you use the contact form, we collect your name, email address, and message.
Mexico Club & Xcaret member-rate inquiries. If you submit a Mexico Club or Hotel Xcaret member-rate inquiry, we collect the contact details and trip preferences you provide, plus a record of your consent. See Member-rate inquiries below.
Usage & device data. Like most websites, we automatically receive standard log data (IP address, browser type, pages visited) and may use privacy-respecting analytics to understand how the site is used.

How we use your information

To send the guide or newsletter you signed up for.
To respond to Mexico Club referrals, member-rate inquiries, licensing requests, and contact messages.
To operate, maintain, secure, and improve the site and understand aggregate usage.
To comply with legal obligations and prevent fraud or abuse.

Third-party services

We rely on a small set of trusted providers to operate the site. Each processes data only as needed to provide their service:

Supabase — database hosting for form submissions, newsletter sign-ups and site content.
Cloudflare — content delivery, security, Workers, and R2 storage for our photography.
Amazon — our packing list links to Amazon search pages (not affiliate links); if you click them, Amazon may set its own cookies. See our Affiliate Disclosure.
Email provider — our newsletter and transactional emails are delivered through a third-party email service.
Google (YouTube, Maps) — some guide pages show an official @xcaret video that loads from youtube-nocookie.com only when you press play, and an embedded Google map; Google may set cookies and receive your IP address.

We do not sell your personal information. We share data with these providers only to deliver the services you request. The one exception is a member-rate inquiry, which we may share with México Destination Club only if you tick the consent box on the form, as described below.

Member-rate inquiries

What we collect. Your name and email, travel dates, party size, hotel preference and any message, plus a record of your consent: the exact consent wording you saw, its version and the time you gave it.
Who we share it with. Michael York, a México Destination Club member, receives your inquiry. With your consent he may pass your details to México Destination Club (Grupo Xcaret’s vacation club, operated by Experiencias Xcaret Loyalty, S.A.P.I. de C.V.). The club may contact you by phone, email or WhatsApp, usually to invite you to its sales presentation, and handles your data under its own privacy notice. Michael may receive referral rewards (hotel nights) from the club.
Why. To quote a member rate for your dates and, if you go ahead, to refer you to the club and arrange your stay.
How long we keep it. As long as needed to answer your inquiry and handle any resulting stay or referral, and no longer than 24 months after our last contact with you, unless the law requires longer.
Withdrawing consent. Email hello@yorkadventures.com at any time. We will stop sharing your details, delete your inquiry, and, if we have already passed your details to México Destination Club, forward your request to the club. You can also contact the club directly.

Cookies & local storage

We use essential cookies and browser local storage to keep the site working — remembering your theme — and we may use analytics cookies to measure usage. You can control or clear these at any time through your browser. For full details, see our Cookie Policy.

Data retention

We keep personal information only as long as needed for the purposes described here — for example, as long as your newsletter subscription is current, as needed to answer your inquiry, or as required to meet legal, accounting, and tax obligations. When data is no longer needed, we delete or anonymize it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

GDPR (EU/UK). You may request access, rectification, erasure, portability, and restriction of your data, and you may withdraw consent at any time.
CCPA (California). You may request disclosure of the data we hold, request deletion, and opt out of any “sale” of personal information — though we do not sell your data.

You can unsubscribe from the newsletter at any time using the link in any email. To exercise any other right, email us at hello@yorkadventures.com.

Children’s privacy

This site is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the site or by email where appropriate.

Contact us

Questions about this policy or your data? Email us at hello@yorkadventures.com or reach out through our contact page.