You agree to the privacy policy below, and the Privacy Policy for Substack, the technology provider.
Privacy Policy — The Bahía Magazine
Last updated: February 2026
1. Who We Are
The Bahía Magazine is an editorial publication operated by Grupo Itúa, S.A. de C.V., a company duly incorporated under the laws of Mexico, through its luxury hospitality brand Bahía Residences.
We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what information is collected in connection with your use of this publication, how it is used, and the rights available to you, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — LFPDPPP) and its applicable regulations.
Brand Controller: Grupo Itúa, S.A. de C.V.
Operating brand: Bahía Residences / The Bahía Magazine
Contact: hello@bahiaresidences.com
2. Platform & Third-Party Processing
The Bahía Magazine is hosted, distributed, and managed exclusively through Substack, a third-party publishing platform. Access to our publication — whether free or paid — requires a Substack account. As such, Substack independently collects and processes all personal data associated with your subscription, including account registration, payment processing, email delivery, and reading activity.
Your use of Substack is governed by Substack’s own Terms of Service and Privacy Policy, available at substack.com. Grupo Itúa, S.A. de C.V. is not responsible for Substack’s data practices, infrastructure, security measures, or any changes to its privacy framework.
3. Personal Data We Collect
The Bahía Magazine is exclusively accessible through Substack. To subscribe, read, or interact with our publication in any capacity, you must create a Substack account. All personal data associated with your subscription — including your name, email address, payment information, reading activity, and engagement data — is collected, stored, and managed directly by Substack, not by Grupo Itúa, S.A. de C.V.
Grupo Itúa, S.A. de C.V. has limited access only to aggregated or editorially relevant information made available through Substack’s platform dashboard, such as subscriber counts and general engagement metrics. We do not independently collect, store, or process your personal data outside of Substack’s infrastructure.
4. Purposes of Data Processing
To the extent that Grupo Itúa, S.A. de C.V. has access to any subscriber information through Substack’s platform, such information is used exclusively for the following purposes:
Primary purposes, which are necessary for the operation of the publication, include delivering editorial content to subscribers, managing referral rewards and Signature Tier benefits, and communicating essential information related to your subscription.
Secondary purposes, which are optional and subject to your consent, include sending curated communications from Bahía Residences beyond the scope of the Magazine, sharing relevant information about BR services, properties, or membership opportunities, and improving the quality and relevance of our editorial content.
You may withdraw consent for secondary purposes at any time by contacting us at hello@bahiaresidences.com.
5. Legal Basis for Processing
The processing of personal data is carried out in accordance with Articles 6, 7, 8, 11, 14, 15, 22, 26, and 36 of the LFPDPPP and its applicable regulations.
6. Data Sharing & Third Parties
Grupo Itúa, S.A. de C.V. does not sell or rent subscriber information.
To the limited extent that subscriber data is accessible to us through Substack’s platform, it will not be shared with third parties except when necessary to fulfill Signature Tier benefits or referral rewards, and when required by legal or governmental authorities under applicable law.
All third parties involved in fulfilling subscriber benefits are required to handle any shared information in accordance with applicable privacy and security standards.
7. Data Security & Retention
Because all subscriber data is collected and stored by Substack, the security and retention of your personal information is governed by Substack’s own security practices and data retention policies.
Grupo Itúa, S.A. de C.V. does not maintain independent databases of subscriber information and therefore cannot be held responsible for the security, availability, or retention of data managed by Substack’s platform.
8. ARCO Rights
Because all personal data associated with your subscription to The Bahía Magazine is collected and managed exclusively by Substack, any requests related to your ARCO rights — including access, rectification, cancellation, or opposition — must be directed to Substack directly through their privacy controls and support channels at substack.com.
Grupo Itúa, S.A. de C.V. does not have the technical ability to access, modify, or delete personal data that resides within Substack’s infrastructure on your behalf.
If you have questions about how Substack handles your data, please refer to Substack’s Privacy Policy at substack.com/privacy.
9. Cookies & Tracking
The Bahía Magazine is accessed through Substack’s platform, which may use cookies and similar tracking technologies to support platform functionality, analyze readership behavior, and improve content delivery. These technologies are governed by Substack’s Cookie Policy.
If you access Bahía Residences’ main website at bahiaresidences.com, that site’s own Cookies Policy applies separately and independently.
10. International Data Transfers
Given that Substack is a U.S.-based platform, your personal data may be stored and processed outside of Mexico. These transfers are conducted under Substack’s own data transfer mechanisms. Grupo Itúa, S.A. de C.V. ensures that any information it independently handles is treated in compliance with applicable legal requirements under the LFPDPPP.
11. Children’s Privacy
The Bahía Magazine is intended for adult readers. We do not knowingly engage with individuals under the age of 18. If you believe a minor has subscribed without appropriate authorization, please contact us at hello@bahiaresidences.com and we will address the matter promptly. Account-level actions must be handled through Substack directly.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform practices, or the scope of our publication. Updates will be published within the Magazine and continued subscription constitutes acceptance of the revised policy.
For material changes, we will make reasonable efforts to notify subscribers directly.
13. Contact
For any questions regarding this Privacy Policy or the handling of your personal data, please contact:
For matters related to your Substack account or personal data managed by Substack, please contact Substack directly at substack.com/support.