Privacy notice.

1. Data controller and contact

Roma Norte Host is responsible for processing personal data received through romanortehost.com and its contact channels. For privacy matters or to exercise ARCO rights, write to hello@romanortehost.com with the subject line “ARCO Rights — Roma Norte Host.”

This service operates in Mexico City. We do not publish a private address as a business address.

2. Data we may collect

When you submit the assessment form, we may collect:

• Name, email address, and, if you choose to provide it, telephone number.
• Number of bedrooms, property location, current condition, and the message you write.
• Landing page, referring page, and campaign UTM parameters.
• Calculator assumptions—property value, traditional rent, nightly rate, nights, management and platform fees, maintenance reserve, operating costs, cleaning, and setup amortization—only when they are included in the request.
• IP address, user agent, date, time, and technical identifiers necessary for security, abuse prevention, and traceability.

By checking the form box, you give your express consent to the processing of any financial or property-related data you choose to include, exclusively for the purposes described in this notice.

3. Purposes of processing

Primary purposes

• To record, review, and respond to your property assessment request.
• To contact you to request context, photographs, or non-sensitive documents and propose next steps.
• To determine whether the property falls within Roma Norte Host’s area and operating profile.
• To prevent spam, fraud, abusive automation, and security issues.
• To maintain a service log, the status of the request, and delivery of internal notifications.

Secondary purposes

We may analyze the form’s source and use in aggregate to improve the site and understand which content generates useful requests. We do not sell your data or use it for third-party advertising.

If you do not want your data used for this secondary purpose, tell us by email; this will not affect the requested assessment.

4. Local technologies and source attribution

The site may use browser session storage to retain, during your visit, the landing page, referral source, UTM parameters, and calculator data when available. This information is attached to the form for operational attribution. The current implementation does not install third-party advertising cookies; if that changes, we will update this notice and the applicable consent mechanisms.

5. Processors, transfers, and hosting

The information is hosted on Cloudflare infrastructure, including its D1 database. When immediate notification is configured, the necessary request data will be sent through a signed webhook to the automation or messaging provider selected by Roma Norte Host. That provider must process the information only to notify the team and, when configured, send an acknowledgment to the prospective client.

We may also share information when required by a competent authority in accordance with the law, or with advisers and providers strictly necessary to deliver the service under confidentiality obligations. We do not make commercial transfers of prospective-client databases.

6. Retention

If the request does not result in a contractual relationship, we retain the record and its metadata for a maximum of 24 months from receipt for follow-up, security, and traceability; after that period, it must be deleted or anonymized. If a contractual relationship begins, necessary data may be retained for the duration of the relationship and for applicable legal or tax periods.

Hashes used exclusively to rate-limit requests are retained temporarily and purged opportunistically after 24 hours. A request’s public identifier does not contain your name or email address.

7. ARCO rights and withdrawal of consent

You may request access, rectification, cancellation, or objection to the processing of your data, and may withdraw consent where applicable. Send your request to hello@romanortehost.com and include:

• Your name and a means of contacting you.
• The right you wish to exercise and a clear description of the request.
• The form reference, if you retained it.
• The minimum information needed to verify that you are the data subject, without sending sensitive documents until we provide an appropriate channel.

We will respond in accordance with the time limits and requirements established by applicable Mexican law. Cancellation may be subject to a blocking period or legal retention obligations.

8. Security and minors

We apply validation, rate limits, non-predictable identifiers, status logging, and webhook signing. No system is infallible; for that reason, we limit the data requested and avoid asking for sensitive documentation during initial contact.

The service is intended for adult property owners or persons authorized to assess a property. We do not intentionally collect data from minors.

9. Changes to this notice

We will publish material changes on this page and update the version date. When a change requires new consent, we will request it before applying the new purpose.

Current version: August 2, 2026.