Legal
Privacy Notice
This text is still pending legal review. If anything here doesn't match what we told you, write to us and we'll send the version that applies to your booking.
Who is responsible
Copas y Raíces is responsible for the personal data collected through this site. The legal entity, tax ID and registered address are pending and will be published here before the site starts selling.
You can reach us at the contact details on this site for anything in this notice.
What we collect, and why
When you book, we ask for your name and email. The email is where your booking code goes — it is the only proof you have on the night — and where we write if a date moves or is cancelled.
We also ask, optionally, how many people in your group need gluten-free, lactose-free or vegetarian food, and we leave a free field for allergies. That is health data and we treat it as such: it is used only to tell the kitchen, and it is shown to the person at the door so nobody is served something that could hurt them.
If you sign up for the newsletter, a waiting list or a repeat notice, we keep your email, the date you agreed and where you agreed from. Each of those is separate, and leaving one does not remove you from the others.
If you write through the contact form or ask about a private event, we keep what you wrote so we can answer it.
What we never see
We do not store card numbers. Payment happens on Stripe's own hosted page: your card details go to them and never pass through our servers. We receive only whether the charge succeeded and an identifier for it.
There are no customer accounts and no passwords. You get into your booking with your booking code plus the email you used, and nothing else.
Who else handles it
Stripe processes the payment. Resend delivers our email. Both are outside Mexico, and using this site means your data reaches them for those two purposes only.
We do not sell your data and we do not hand it to anyone for advertising.
How long we keep it
Bookings and their charges are kept as accounting records. Newsletter and notice subscriptions are kept until you leave them; leaving is one tap from any email we send.
We do not currently delete old records automatically. If you want yours removed, ask us and we will do it, keeping only what the tax authority requires us to hold.
Your rights
You can ask what we hold about you, have it corrected, have it deleted, or object to a use of it. Write to the contact address on this site and say which of the four you want; we may ask you to confirm the email you booked with, so we don't hand your data to someone else.
Cookies
This site does not install third-party tracking cookies today. It keeps a short-lived technical marker during checkout so your held seats survive a reload. If analytics is added later, this notice will say so and you will be asked first.
The map
The event page can show a map of the venue. It does not load on its own: the map tiles are served by Esri, and requesting them sends your IP address to Esri, so the map only loads if you tap “View the map”. If you never tap it, this site makes no request to Esri on your behalf.