SPA Privacy Notice

THE7SPA Comprehensive Privacy NoticeTHE7SPA COMPREHENSIVE PRIVACY NOTICE – CARTESIANO BOUTIQUE & WELLNESS HOTEL
TURISMO GOURMET, S.A.P.I. DE C.V. (hereinafter referred to as the “Responsible Party”), operating under the trade names Cartesiano Boutique & Wellness Hotel / THE7SPA, located at Calle 3 Oriente No. 610, Historic Center, ZIP Code 72000, Puebla, Puebla, Mexico, is responsible for the collection, use, protection, and processing of the personal data obtained from its clients, guests, spa users, and visitors, in accordance with applicable Mexican law.

This Comprehensive Privacy Notice is intended to clearly inform you about the personal data we collect, the purposes for which it is used, the parties with whom it may be shared, and the means available for you to exercise your rights of access, rectification, cancellation, and objection (ARCO Rights), revoke your consent, and limit the use or disclosure of your personal data.

1. Personal Data We Collect
For the provision of THE7SPA services, we may collect personal data directly or indirectly through printed, electronic, telephone, digital means, or through authorized personnel, including the following categories:

a) Identification and Contact Information
Full name
• Age
• Mobile phone number
• Email address
• Signature
• Room number (for hotel guests)
• Date and time of service

b) Service-Related Information
Requested treatment
• Assigned treatment room or suite
• Assigned therapist or staff member
• Service preferences
• Session objectives
• Areas of focus or areas to avoid
• Preferred pressure level
• Skin type, skincare needs, and cosmetic profileInformation related to products used by the guest

c) Sensitive Personal Data
To provide safe and personalized spa, massage, facial, wellness, or related services, we may collect and process sensitive personal data related to your current or past health condition, including but not limited to:

• Allergies
• Hypersensitivities
• Pregnancy and gestation stage
• Recent injuries
• Musculoskeletal conditions
• Circulatory, cardiac, respiratory, or neurological conditions
• Dermatological or skin conditions
• Medications that may affect the treatment
• Any other medical or physical condition relevant to the safety of the service

For facial or skincare treatments, we may also collect information regarding:
• Use of retinol, AHAs, or other cosmetic active ingredients
• History of irritation, acne, hyperpigmentation, sensitivity, or recent cosmetic procedures

2. Primary Purposes of Data Processing
The personal and sensitive personal data collected will be used for the following primary purposes necessary for the existence, maintenance, and fulfillment of the legal relationship derived from THE7SPA services:

1. To identify the data subject and properly register services provided.
2. To schedule, reserve, confirm, modify, or cancel spa services.
3. To determine whether the guest is fit to receive the requested treatment.
4. To detect contraindications, restrictions, risk factors, or special needs before, during, and after the service.
5.  To personalize massages, facials, body treatments, wellness technologies, rituals, or experiences according to the guest’s profile, preferences, and health condition.
6. To protect the integrity, health, and safety of both the guest and THE7SPA staff.
7. To maintain operational records and service traceability for continuity, internal follow-up, and quality control purposes.
8. To manage charges, payments, billing, clarifications, and administrative processes related to the contracted services.
9. To address complaints, comments, requests, incidents, claims, or inquiries related to the services provided.
10. To comply with legal, regulatory, sanitary, contractual, administrative, or security obligations applicable to the Responsible Party.
11. To document consents and operational records related to service provision.

3. Secondary Purposes of Data Processing
Additionally, and not necessary for the provision of the main service, your personal data may be processed for the following secondary purposes:

1. Sending promotions, offers, benefits, marketing campaigns, and newsletters related to THE7SPA, Cartesiano Boutique & Wellness Hotel, or related services.
2. Satisfaction surveys, guest experience evaluations, post-service follow-up, and internal quality studies.
3. Contacting you to invite you to events, special experiences, loyalty programs, or updates related to the hotel and spa.
4. Statistical, commercial, or consumer preference analysis to improve our service offerings.

If you do not wish your personal data to be processed for one or all of the secondary purposes mentioned above, you may notify us at any time by sending an email to spa.concierge@cartesiano360.com or by submitting a written request at THE7SPA reception.
Refusing the use of your personal data for secondary purposes will not affect your access to the services and products you request or contract.

4. Consent for the Processing of Sensitive Personal Data
THE7SPA may collect and process sensitive personal data only when necessary, appropriate, and relevant for the safe provision of the requested service.
By providing information related to your health condition, allergies, pregnancy, medications, skin conditions, injuries, illnesses, or any other sensitive data through physical or digital forms or any authorized means, and by signing the corresponding document, you expressly provide written consent for the processing of such sensitive personal data exclusively for the primary purposes stated in this Privacy Notice.

5. Means Used to Collect Personal Data
Your personal data may be collected through:
• Printed consultation forms or intake forms
• Digital forms
• Reservation requests
• EmailsTelephone calls
• WhatsApp messages or other authorized communication channels
• Reservation platforms or internal hotel and spa systems
• In-person interaction with reception staff, wellness advisors, therapists, or authorized personnel


6. Transfer of Personal Data
Your personal data may be shared within or outside Mexico only under the following circumstances:
1. With internal departments of the Responsible Party when necessary for service provision, operational coordination, billing, customer service, administrative management, or follow-up.
2. With service providers acting on behalf of the Responsible Party under confidentiality obligations and security measures.
3. With competent authorities when legally required or requested by a duly authorized authority.
4. In cases permitted by applicable law when the transfer is necessary for the recognition, exercise, or defense of a right in judicial, administrative, or arbitration proceedings.
Outside these cases, and unless otherwise permitted by law, your personal data will not be transferred to third parties without your consent.


7. Options to Limit the Use or Disclosure of Your Personal Data
You may limit the use or disclosure of your personal data for promotional, advertising, or marketing purposes by:
1. Submitting a written request at THE7SPA reception.
2. Sending your request to: spa.concierge@cartesiano360.com
3. Indicating your preference in any printed or digital form made available to you.
4. Requesting registration, when applicable, in the Public Registry to Avoid Advertising maintained by PROFECO (Federal Consumer Protection Agency).


8. ARCO Rights
You or your duly authorized legal representative have the right to:
• Access your personal data held by the Responsible Party;
• Request correction of inaccurate, incomplete, or outdated data;
• Request deletion when the data is no longer necessary for the stated purposes, is being used for unauthorized purposes, or when the legal/service relationship has ended; and
• Object to the processing of your personal data for specific purposes.

To exercise any ARCO Rights, you must submit a written request to spa.concierge@cartesiano360.com or at the Responsible Party’s address, including:

1. Full name of the data subject
2. Proof of identity or legal representation
3. Clear and precise description of the personal data involved
4. Any information facilitating the location of your data
5. Supporting documentation for requested corrections, if applicable
The Responsible Party will process your request within the terms established by applicable law.


9. Revocation of Consent
You may revoke your consent for the processing of your personal data at any time, provided this does not prevent compliance with legal obligations or substantially affect the provision or documentation of already contracted services.

To revoke consent, you must submit your request through the same channels established for exercising ARCO Rights.


10. Retention of Personal Data
Your personal data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Notice and as required by legal, tax, sanitary, administrative, or contractual obligations, or for the time necessary to address clarifications, claims, or liabilities arising from the legal relationship.In the case of sensitive personal data, the Responsible Party will make reasonable efforts to minimize the retention period.


11. Security Measures
The Responsible Party has implemented reasonable administrative, technical, and physical security measures to protect your personal and sensitive personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing.
Access to your personal data is restricted to authorized personnel who require such information to perform their duties and responsibilities.


12. Use of Tracking Technologies on the Website
The Responsible Party’s website may use cookies, web beacons, or similar technologies to collect information regarding browsing habits, time spent on the website, sections viewed, and usage statistics.
You may disable or limit the use of these technologies through your browser settings.


13. Changes to This Privacy Notice
This Privacy Notice may be modified, updated, or adjusted at any time due to legislative, regulatory, operational, or commercial changes, or for any other reason.

Any modifications will be published on the Responsible Party’s official website at: www.cartesiano360.com/en/spa/privacy-policy It may also be available for consultation at THE7SPA reception.


14. Privacy Contact Information
For any questions regarding this Privacy Notice, the processing of your personal data, the exercise of ARCO Rights, or the revocation of consent, you may contact THE7SPA through:
Email: spa.concierge@cartesiano360.com
Phone: +52 (222) 709 9113Address:
Calle 3 Oriente No. 610
Historic Center, ZIP Code 72000
Puebla, Puebla, Mexico

15. Last Update
Last updated: May 9, 2026

Informed Consent, Service Policies
& Liability Waiver – THE7SPA

Informed Consent, Service Policies & Liability Waiver – THE7SPA
TURISMO GOURMET, S.A.P.I. DE C.V., hereinafter referred to as “THE7SPA” or the “Provider,” operating under the trade name Cartesiano Boutique & Wellness Hotel / THE7SPA, hereby makes available to its clients, guests, users, and visitors this Informed Consent, Service Policies & Liability Waiver document, which governs the provision of spa, massage, facial, wellness, hydrotherapy, and related services.By requesting, reserving, using, or receiving any THE7SPA service, the guest acknowledges having read, understood, and accepted this document.


1. Purpose and Scope of Services
The services provided by THE7SPA are intended for wellness, relaxation, personal care, non-medical physical recovery, and spa experiences. No massage, facial, body treatment, wellness experience, hydrotherapy circuit, or technology offered by THE7SPA is intended to replace medical diagnosis, treatment, follow-up care, psychological or psychiatric care, physical therapy, medical rehabilitation, or hospital intervention.THE7SPA reserves the right to refuse, suspend, reschedule, or modify any service when, in its reasonable judgment, physical, medical, behavioral, operational, or safety conditions may pose a risk to the guest, other clients, or staff members.


2. Declaration of Accurate Information
The guest declares that all personal, medical, skincare, physical, and relevant background information provided to THE7SPA is truthful, complete, and up to date, and agrees to promptly inform THE7SPA of any changes in health condition, pregnancy, injuries, allergies, medications, recent procedures, pain, sensitivities, contraindications, or any other circumstance that may affect the safety or suitability of the service.
Failure to disclose, falsification, inaccuracy, or omission of relevant information may result in denial, suspension, or termination of the service without liability to THE7SPA.


3. Informed Consent and Inherent Risks
The guest acknowledges that certain spa, massage, facial, hydrotherapy, thermal contrast, and related treatments may produce normal or inherent reactions, including but not limited to:
a) temporary redness;
b) skin sensitivity;
c) post-treatment muscle soreness;
d) minor bruising;
e) dizziness;
f) deep relaxation;
g) fatigue;
h) temporary changes in body sensitivity;
i) reactions to cosmetic or aromatic products; and
j) temporary discomfort associated with treatment techniques or applied pressure.

The guest voluntarily consents to receive the services, understanding their nature, scope, and inherent risks.


4. Minors
THE7SPA services are primarily intended for adults.For services provided to minors:
a) the minor must be accompanied at all times by a parent or legal guardian;
b) the parent or legal guardian must provide express consent and sign the corresponding authorization form; and
c) THE7SPA may restrict or deny access to certain areas, facilities, or services for safety, health, operational, or internal policy reasons.
Unless expressly authorized by THE7SPA, minors must refrain from using steam rooms, saunas, jacuzzis, cold plunges, contrast pools, or any heat or thermal contrast facilities.


5. Pregnancy and Special Conditions
For safety reasons, the use of the hydrotherapy circuit—including but not limited to steam rooms, saunas, jacuzzis, cold plunges, contrast immersions, and other thermal or hydrothermal facilities—is restricted throughout pregnancy unless expressly authorized in writing by the Provider under internal safety criteria.Prenatal massage may only be offered beginning in the 13th week of pregnancy, subject to:a) operational evaluation by THE7SPA;
b) absence of apparent contraindications;
c) the use of pregnancy-appropriate techniques; and
d) presentation of written medical authorization when requested by THE7SPA or when risk factors or special pregnancy conditions exist.THE7SPA reserves the right to deny, interrupt, or cancel services in cases of high-risk pregnancy, warning symptoms, visible discomfort, lack of medical authorization when required, or any situation deemed unsafe.


6. Medical Conditions, Allergies, and Contraindications
The guest agrees to disclose any medical condition, allergy, hypersensitivity, injury, recent surgery, circulatory issue, heart condition, dermatological concern, epilepsy, diabetes, respiratory condition, infection, acute pain, medication use, recent alcohol or substance consumption, recent aesthetic procedure, or any circumstance that may affect the service.
THE7SPA may modify treatments, adjust products, reduce intensity, omit techniques, or deny services whenever contraindications, risks, or reasonable safety concerns are identified.


7. Hydrotherapy Circuit and Facilities
The use of the hydrotherapy circuit, steam rooms, pools, tubs, jacuzzis, showers, wet areas, technology, and all other THE7SPA facilities must follow staff instructions at all times.Guests agree to:
a) comply with usage times, occupancy limits, instructions, and restrictions;
b) refrain from manipulating controls, equipment, temperatures, or restricted-access installations;
c) immediately report any physical discomfort, dizziness, falls, incidents, or observed malfunctions; and
d) use all facilities responsibly, hygienically, and respectfully.
THE7SPA may limit access to any facility for maintenance, safety, operational, weather-related, sanitation, capacity, health, or risk prevention reasons.


8. Conduct Within the Facilities
THE7SPA maintains a strict policy of respect, safety, and professionalism.

The following conduct is strictly prohibited:a) sexual remarks, advances, or behavior toward staff or other guests;
b) sexual acts or sexually suggestive conduct within the facilities;
c) entering the premises intoxicated or under the influence in a manner that compromises safety;
d) verbal or physical aggression toward staff or guests;
e) damage to furniture, equipment, linens, facilities, or amenities; and
f) failure to follow staff instructions related to safety, hygiene, operations, or coexistence.Violation of this policy may result in:i) immediate termination of the service;
ii) removal from the spa facilities;
iii) sanitation, deep cleaning, replacement, or repair charges when applicable;
iv) internal reporting to the hotel, if applicable; and
v) any applicable legal or administrative action.
When extraordinary sanitation, specialized cleaning, damages, or replacement costs are reasonably incurred, THE7SPA may apply the corresponding charges with internal justification.


9. Punctuality, Delays, and No-Shows
The guest acknowledges that THE7SPA services are organized according to scheduled times, treatment rooms, therapists, and operational availability.In case of late arrival:
a) the service may begin at the actual arrival time, subject to operational availability;
b) the service will still end at the originally scheduled time to avoid disruption to subsequent appointments; and
c) lost time due to guest delay will not be compensated.

In the event of a no-show, late cancellation, or rescheduling outside the permitted timeframe, the cancellation policy in effect at the time of booking shall apply, available at reception and at www.cartesiano360.com/en/spa/cancellation-policy
Cancellations must be made at least 24 hours before the scheduled appointment.


10. Pricing, Payments, and Additional Charges
The guest agrees to pay for all services reserved or received, as well as any additional consumption, upgrades, products, or related services expressly requested and accepted.
THE7SPA will not charge for additional services that were neither requested nor expressly authorized by the guest.Prices, promotions, restrictions, validity periods, special conditions, and applicable policies are those communicated at the time of reservation, confirmation, or service delivery.


11. Cancellations, Rescheduling, and Denial of Service
Cancellations and rescheduling requests are governed by the policy communicated to the guest at the time of booking.
THE7SPA may refuse, suspend, or cancel services without constituting breach of obligation when:a) medical or safety contraindications exist;
b) relevant information has been withheld;
c) aggressive, sexual, disrespectful, or unsafe behavior occurs;
d) intoxication or impairment incompatible with the service is detected;
e) operational issues or force majeure prevent safe service delivery; or
f) protection of the guest, third parties, or staff becomes necessary.
In such cases, THE7SPA will determine whether rescheduling, modifications, cancellation, or application of existing policies is appropriate.


12. Personal Belongings
Guests are responsible for their personal belongings. It is recommended not to bring jewelry, cash, documents, electronics, or valuables into treatment rooms, wet areas, or common spa spaces.
THE7SPA shall not be responsible for loss, theft, or damage to personal belongings unless formally entrusted for safekeeping or otherwise required by applicable law.


13. Liability Release and Reasonable Limitation of Liability
The guest acknowledges and accepts that THE7SPA services involve normal and reasonably foreseeable inherent risks associated with wellness, massage, spa, hydrotherapy, and non-medical personal care activities.
Accordingly, the guest accepts ordinary effects, expected reactions, or minor discomforts inherent to the services, provided THE7SPA has acted with reasonable care and according to standard operational practices.
Nothing in this document constitutes a waiver of non-waivable legal rights or a total release of THE7SPA from liability.
THE7SPA shall remain liable as required by law in cases of willful misconduct, negligence, malpractice, breach of obligation, service-related defects, damages caused by staff, or any other circumstance established by applicable law.


14. Privacy and Personal Data
Any personal or sensitive personal data provided by the guest in connection with reservations or services will be processed in accordance with THE7SPA’s Comprehensive Privacy Notice, available at reception and at: www.cartesiano360.com/en/spa/privacy-policy
The guest acknowledges having been informed of the existence of such Privacy Notice and of the mechanisms available to exercise rights of access, rectification, cancellation, and objection (ARCO Rights), revoke consent, and limit the use or disclosure of personal data.


15. Customer Service, Claims, and Complaints
For any clarification, follow-up, observation, or complaint related to the services, guests may contact THE7SPA directly through reception, via email at spa.concierge@cartesiano360.com, or through the customer service channels available at the establishment.

Mexico’s Federal Consumer Protection Agency (PROFECO) has administrative jurisdiction over disputes regarding the interpretation or fulfillment of services offered to consumers, without prejudice to any legal rights available to the parties under applicable law.


16. Governing Law and Jurisdiction
This document shall be governed by the applicable laws of the United Mexican States.
Without prejudice to the administrative authority of PROFECO, for the interpretation and enforcement of civil obligations arising hereunder, the parties may submit to the competent courts of the State of Puebla, Mexico, waiving any other jurisdiction that may apply due to their present or future domiciles, unless otherwise required by mandatory law.

17. Acceptance
The guest acknowledges having fully read, understood, and accepted this document; having had a reasonable opportunity to review its contents prior to receiving services; having had the opportunity to ask any relevant questions to THE7SPA staff; and that consent to receive services is free, informed, and voluntary.. providing information related to your health condition, allergies, pregnancy, medications, skin conditions, injuries, illnesses, or any other sensitive data through physical or digital forms or any authorized means, and by signing the corresponding document, you expressly provide written consent for the processing of such sensitive personal data exclusively for the primary purposes stated in this Privacy Notice.

Contáctanos para resolver tus dudas. Estamos para servirte.