Privacy Statement

This statement is our full privacy notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). It covers what you give us in the dancer and supporter registration forms and anything you send us by email. The Spanish version is the official one.

1. Who looks after your data

Your personal data is controlled by Buffalo Mountain Sundance, located at Rancho Las Maravillas, municipio de Sultepec, Estado de México, México. For any privacy matter, write to info@buffalomountainsundance.org.

2. What we ask for

The forms ask for:

• Your full name, phone or WhatsApp number, and email.
• The name, relationship and phone number of your emergency contact.
• Dancers: whether this is your first time, where or with whom you have danced before, and who is coming to support you.
• Supporters: which dancer you are supporting (if applicable) and your general willingness to serve the community.

Your emergency contact's details belong to someone else. By giving them to us you confirm that this person knows you listed them and agrees to be called if something happens to you.

3. Sensitive data

Your dance history and your participation in a Lakota ceremony say something about your spiritual beliefs. Mexican law treats this as sensitive data, so we only process it with your express consent, which you give by ticking the acceptance box in the registration form.

The form does not ask about your health. If you choose to tell us about a medical condition so we know how to help in an emergency, we treat it as sensitive data too, and only the people coordinating care at the camp will know about it.

4. What we use it for

We use your data only to:

• Register your participation and organize dancers and supporters.
• Send you a confirmation and practical information about the ceremony: dates, directions, what to bring.
• Reach your emergency contact and arrange medical care if you need it.

We don't use your data for advertising, we don't add you to mailing lists and we don't sell it. If we ever want to tell you about future ceremonies, we will ask you first.

5. Who we share it with

Registrations are stored in a Google spreadsheet (Google Sheets), and confirmation emails are sent through Google's services. Google acts as a provider that stores the information on our behalf, and its servers may be outside Mexico.

Beyond that, we would only share your data with medical services, civil protection or the authorities when it is needed to handle an emergency or when the law requires it. The law does not require your prior consent in those cases.

6. How long we keep it

We keep your data while the ceremony is being organized and for up to twelve months after it closes. After that we delete it, unless you ask us in writing to keep it for future ceremonies.

7. Your ARCO rights

At any time you can ask to access your data, rectify it if it is wrong, cancel it, or object to our using it. You can also withdraw your consent or ask us to limit how we use it.

To do so, write to info@buffalomountainsundance.org including:

• Your full name and an email or phone number where we can reply.
• A copy of an official ID (or your representative's ID and proof that they represent you).
• Which right you want to exercise and over which data.

We will reply within 20 business days and, where it applies, make the change within the following 15 business days. If you cancel your data before the ceremony, we will no longer be able to keep your registration.

If you feel we did not handle your request properly, you can go to Mexico's data protection authority, currently the Secretaría Anticorrupción y Buen Gobierno.

8. Cookies and outside services

The site uses no analytics, advertising or tracking tools. It sets a single cookie, bms_lang, to remember whether you prefer Spanish or English.

Some pages load content from third parties. When you open them, your browser connects to these services and they receive your IP address:

• Google Fonts, for the typefaces.
• OpenStreetMap and unpkg, for the map on Getting there.
• Open-Meteo, for the forecast on the Weather page.

If you message a driver through the WhatsApp buttons, that conversation is between you and them and falls under WhatsApp's policies. We don't see it.

The chat button on every page opens WhatsApp so you can write to the community. The site sends nothing on its own: the conversation starts when you send your message. We receive those messages and your WhatsApp number through Kapso (kapso.ai), the platform we use to answer visitors, and we use them only to reply to your questions. The conversation is also subject to WhatsApp's policies.

9. Minors

The forms are filled in by adults. If you are bringing children or teenagers, their data comes to us from their parent or guardian, who decides about it and can exercise their ARCO rights.

10. Changes to this statement

If we change this statement, we will post the new version on this page with its update date. If the change affects how we use data you have already given us, we will let you know by email.