How to exercise applicable privacy rights and submit requests.
CONTACT & PRIVACY REQUEST PROCEDURE
This Procedure explains how guests, website visitors, prospective customers, and other individuals may contact Blue X Ocean Adventures about personal information, marketing preferences, privacy questions, or requests concerning their data.
Privacy requests may be submitted through the designated privacy email address or website privacy-request form. Blue X may also provide another approved method appropriate to the destination or applicable law.
Privacy Email: legal@bluexadventures.com
Privacy Request Form: https://bluexadventures.com/legal/privacy-request.html
Business Address: Miami, Florida — business correspondence through bluexadventures.com/contact.html
Telephone / WhatsApp: (774) 587-0268
Depending on applicable law and the circumstances, a person may ask Blue X to provide access to personal information, correct inaccurate information, delete information, provide a portable copy where applicable, object to or restrict certain processing where applicable, withdraw marketing consent, or exercise applicable choices concerning targeted advertising, sale, sharing, or similar uses.
Rights vary by jurisdiction and may be subject to legal exceptions, verification requirements, retention obligations, and the scope of the law that applies to Blue X.
For personal information subject to applicable Mexican privacy law, individuals may have rights commonly known as ARCO: Access (Acceso), Rectification (Rectificación), Cancellation (Cancelación), and Opposition (Oposición), together with other rights provided by applicable law.
The Mexico-facing privacy notice and request process should provide the information required for individuals to exercise applicable rights and should be available in Spanish.
For information processed in connection with Miami operations, Blue X will honor privacy rights that apply under applicable U.S. and Florida law. The availability and scope of particular statutory rights may depend on the law's applicability, business thresholds, the type of information, and applicable exemptions.
To help Blue X locate the correct records, a request should include the requester's name, contact information, the nature of the request, and enough information to reasonably identify the relevant interaction or reservation. A reservation number, destination, approximate booking date, or email/telephone number used for the reservation may be helpful.
Blue X should not request more identity information than reasonably necessary to verify and process the request.
Blue X may take reasonable steps to verify that a requester is the person to whom the information relates, or an authorized representative where permitted. The verification method should be proportionate to the sensitivity of the information and risk of unauthorized disclosure or deletion.
Where applicable law permits an authorized agent or representative to submit a request, Blue X may request reasonable evidence of authority and may take appropriate steps to verify the identity of the individual concerned.
Requests concerning information about a minor should be handled with additional care. Blue X may require appropriate verification of the parent or legal guardian's authority before disclosing, changing, or deleting information concerning a minor.
A person may opt out of Blue X promotional email or similar marketing communications by using the unsubscribe method provided in the communication or by contacting Blue X through the designated channel.
Operational communications concerning an active reservation, safety, payment, customer service, or another requested transaction are not necessarily marketing and may continue when reasonably necessary to provide the service.
Website visitors may manage available cookie categories through the Blue X cookie preference center. Where applicable, Blue X will provide legally required choices concerning targeted advertising, sale, sharing, or similar processing as described in its Privacy Policy and Cookie Policy.
Blue X will acknowledge and process verified privacy requests within the time required by applicable law. If additional time is legally permitted and reasonably necessary, Blue X will provide any notice required by applicable law.
Blue X should not promise a single universal response deadline on the public website unless that deadline has been verified for all applicable jurisdictions and request types.
Blue X may retain or continue processing certain information when permitted or required for purposes such as completing a requested transaction, accounting and tax records, fraud prevention, security, legal claims, regulatory compliance, insurance, incident records, exercising legal rights, or other lawful purposes.
If Blue X cannot fully grant a request, it should provide the explanation or appeal information required by applicable law.
Blue X will use reasonable administrative and technical measures to protect privacy-request records and reduce the risk of unauthorized disclosure, alteration, or deletion. Sensitive information should not be sent through an insecure channel when a safer approved method is available.
Blue X will not unlawfully discriminate or retaliate against a person for exercising a privacy right provided by applicable law. This does not prevent Blue X from applying legitimate differences reasonably related to a requested service or legally permitted program.
Privacy questions or concerns should first be directed to the designated Blue X privacy contact. Where applicable law provides a right to complain to or seek assistance from a competent authority, nothing in this Procedure removes that right.
This Procedure should be read together with the Blue X Ocean Adventures Privacy Policy, Cookie Policy & Consent Notice, Website Terms & Conditions, and applicable reservation or participant documents.