TOTAL EVENTOS · PRIVACY

Privacy notice

This English version is provided for convenience only. In case of any difference, the Spanish version prevails.

Last updated: November 4, 2026.

1. Data we may process

• Name, phone, email and the information you provide to request a quote or receive service.
• Event date, type, venue, address, schedule, services and coordination details.
• Identification and contact data relevant to the booking, as well as tax ID (RFC) and address when required for the document or invoicing.
• Payments, amounts, method, date and references or receipts of recorded payments. These forms never ask for bank passwords or CVV codes.
• Name and image of the signature, acceptance of documents and technical records of the transaction, such as date, IP address and browser. The signature is not used for biometric recognition.
• For RSVP: names of families or guests, assigned seats, reply, number of attendees, table layout and recorded check-ins.
• Photos, videos, music and text created or provided for the photo booth, the 360 photo booth, invitations and booked galleries.
• Technical data needed for security and operation, such as private codes, session identifiers, errors and server requests.

We do not ask for sensitive data such as health information, religious beliefs or intimate preferences to quote or confirm attendance. Please avoid including that kind of information when it isn't necessary. If a service ever requires it, its purpose must be disclosed and the appropriate consent obtained.

2. Purposes necessary for the service

We use the relevant data to answer requests, prepare quotes, check availability, formalize and evidence agreements, record payments, coordinate logistics, provide the booked service, handle inquiries and comply with legal obligations. The digital tools use the information to show the event in the private portal, prepare the invitation, manage RSVPs, seats and check-ins, and deliver or share memories with the people who have the corresponding access.

Staff may document the setup, equipment and venue conditions as internal evidence of installation, delivery, safety and handling of inquiries. That evidence is not published as promotional material.

Processing is limited to what is necessary for these purposes. Where a retention obligation applies, a deletion request does not remove documents that must be kept for legal reasons or to defend rights.

3. Advertising and other optional purposes

Photos and videos are delivered in a private gallery. Requesting a quote, booking or confirming attendance does not by itself authorize the use of identifiable images for ads or testimonials.

If an additional purpose is proposed, such as a campaign, testimonial or promotional post with identifiable data or images, a separate authorization stating its scope will be requested. You may refuse without affecting the booked service. To withdraw an authorization or limit promotional messages, email the privacy address with the subject “Limitar uso de datos” (limit data use). Consent to advertising is not required to exercise your rights.

In new contracts and authorizations that so state, promotional use is chosen separately: A, up to five photos and three videos of the event, and only people with a valid individual authorization; B, setup only, with no people or identifiable data; or C, no promotional authorization. C is the default option. New authorizations allow new posts for twenty years from the choice while they remain in effect; that period does not require keeping files for twenty years. The image of a minor requires the corresponding legal representation, which is reviewed before enabling the permission. No choice by the host authorizes on behalf of all guests.

Removal or anonymization can be requested at any time, even before the authorization expires, at privacidad@totaleventos.com.mx. New uses stop and content under our control is removed or edited within five business days of an identified request. You don't have to wait twenty years. Content already published may remain unless removal is requested or another reason to delete it exists; when the period ends, new posts require renewal. Legally appropriate steps will be taken regarding third-party copies, without claiming control over them. The original authorization and later requests are kept as evidence without retroactively changing their wording.

4. Guests, photos and minors

The organizer provides or manages the event guest list. If you are a guest, you can read this notice and contact Total Eventos to learn about or correct the data we process about you. If you provide information or images of other people, please tell them the purpose and obtain the appropriate authorization; for minors, their legal representative must be involved when necessary. This does not remove Total Eventos' obligations as data controller.

Promotional use of images of identifiable people requires the appropriate authorization from each person. For identifiable minors, authorization from their mother, father or guardian is required; the host's choice does not replace that representation or the rights of other people.

Private codes and links give access to whoever receives them. If the organizer shares them, other people could see the enabled content. Don't post your portal, contract or agreement links; share only the invitation or gallery links meant for your guests.

5. Technology providers and data sharing

Depending on the services enabled, providers involved include hosting providers such as Hostinger; Google Sheets and Apps Script for lists and RSVPs; Google Calendar for coordination; photo booth platforms such as Touchpix; QR codes are generated on our own server; and WhatsApp when you choose to contact us that way. Their involvement may mean processing outside Mexico.

For events in Mexico, Touchpix processes data on servers in the United States. Its terms state that photos and videos are stored for six months by default, with storage extensions that may lengthen that period; its notice provides six months for the email addresses used for downloads. These provider periods do not extend the availability of the gallery you booked. See the Touchpix terms and its privacy notice.

Only the information needed for each function may be shared. Providers acting on behalf of Total Eventos must process it under the applicable confidentiality and security conditions. When a platform acts as an independent controller or data is transferred to a third party, the consent requirements or exceptions set by law will be followed. Using a link to an external service is also governed by that service's own notice.

We do not sell guest lists or contact data. We may share information when needed to comply with an obligation, respond to an order from a competent authority or exercise or defend rights, in the cases the law allows.

6. Retention and security

We keep information while managing the service and afterwards for the maximum periods below. When each period ends, the data is deleted or de-identified. Documents that serve as proof of what was agreed are kept blocked: they are stored without being used for any other purpose and are only accessed to comply with legal obligations or defend rights.

• Quote requests that were not booked: up to 24 months from the last contact.
• Guest data and RSVPs: up to 18 months after the event.
• Shared gallery photos: while the gallery is published, and no more than 24 months after the event.
• Contracts, agreements, signatures, image use permissions, removal requests and their records: 11 years after the event or the last use of the image, whichever is later, blocked.
• Payment receipts and tax information: 6 years.
• Contact data with permission for promotions: until you unsubscribe.
• Record of unsubscribes and image removals: kept to respect your decision and not contact you again or publish that content.

Each gallery's availability depends on the service and the terms communicated; this notice does not create an additional storage period.

Private access and authorization controls are used for the portal features. Keep your codes safe and let us know if you think they were shared without authorization. If a breach significantly affects your property or moral rights, you will be informed as required by applicable law.

7. Rights of access, rectification, cancellation and objection (ARCO)

You can request access to your data and information about its use; correct inaccurate data; request its deletion when appropriate; or object to processing in the cases provided by law.

Send your request to privacidad@totaleventos.com.mx with the subject “Derechos ARCO” (ARCO rights). Include your name, how you want to receive the reply, the right you wish to exercise, a clear description of the data or the event and, if you request a correction, the change needed and supporting evidence. Proportionate proof of identity and, where applicable, of representation will be arranged; do not send passwords or bank details by email.

The decision will be communicated within a maximum of twenty business days from receipt of the request and, if granted, will take effect within the fifteen business days following the reply. Any legally permitted extensions, requests for more information or restrictions must be communicated and justified. Exercising these rights is free, except for permitted reproduction or shipping costs where applicable.

8. Withdrawing consent and limiting use

Use the same email address with the subject “Revocar consentimiento” (withdraw consent) or “Limitar uso de datos” (limit data use), and identify the processing your request refers to. The procedure and its consequences will be explained. Withdrawal is not retroactive and does not prevent keeping information when a legal obligation or legal ground allows it.

To stop receiving promotions, reply “BAJA” (stop) to the promotional message or email the privacy address with the subject “Baja de promociones” (unsubscribe). Opting out does not affect the booked service or your rights.

9. Cookies and browsing technologies

The site may use cookies or identifiers needed for sessions, security, forms and preferences. You can review their settings in your browser; blocking necessary items may prevent access to private features.

Optional analytics, when enabled, will be offered with controls to accept or reject it. Client names, phone numbers, emails, event dates, free-text messages, signatures or private links will not be sent to analytics tools. Rejecting optional analytics will not prevent you from requesting a quote or browsing the services.

10. Changes and questions

Changes will be posted on this page with their update date. If a use requiring different consent is proposed, consent must be requested beforehand. For questions about this notice, use the privacy email. You keep the remedies provided by law and can consult the competent authority, the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry of Anti-Corruption and Good Governance).

Read Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Spanish) ↗