By Wayne C. Robinson — 25 years in timeshare sales and cancellations, including time working directly for a Mexico-based timeshare company
You bought a timeshare in Mexico, and a while later — maybe months, maybe years — you started getting calls. Someone you never gave your number to already knows you own a unit there. They know the resort. Sometimes they know more than that. They’ve got a buyer lined up, or a way to get you out of your contract, or a “final notice” that sounds urgent enough that you almost don’t ask how they got your information in the first place.
That question — how did they get my information? — is one I can actually answer, because for years I sat on the other side of that desk.
The Clause Most Owners Never Noticed
Somewhere in the stack of paperwork you signed at the point of sale, there’s very likely a clause about how your information can be shared. It’s usually a few sentences buried well past the pricing and the maintenance fee schedule, written in the kind of language that’s easy to skim past when you’re excited about a new vacation property.
In plain terms, clauses like this typically give the resort permission to share what you provided — your name, contact information, sometimes far more — with affiliated companies, subsidiaries, and other entities connected to the services they offer. I’ve reviewed an actual owner’s payment authorization document that spells this out in black and white. Quoting directly, grammatical errors and all, exactly as it appears in the original: “The AGENCY can/will transmit your information and personal data to our affiliate companies, subsidiaries, nationally and internationally, with our collection agency, credit union, others than us…” That same page ties the sharing to hotel services, tourist and commercial services, and advertising and informational brochures.
Who Are The “Affiliates?”
I want to be precise about what this document does and doesn’t say, because precision is what makes this credible instead of just alarming. It names affiliate companies, subsidiaries, a collection agency, and a credit union — not resale or “exit” companies, and it doesn’t use the word “partners” in this particular clause. A separate purchase agreement from the same paperwork mentions “accredited trading partners,” but only in connection with room rates and travel wholesalers — not personal information sharing. So while this document confirms the agency can move your information to affiliates and subsidiaries anywhere in the world, it does not confirm your information is being handed to timeshare resale companies specifically. That’s a line I won’t cross without something in writing to back it up.
For a U.S. or Canadian owner with a Mexico timeshare, the word “internationally” still matters more than it might first appear. It means the sharing isn’t limited to domestic entities operating under the consumer protection rules you’re used to. It can mean your information leaving the country entirely, going to organizations with no obligation to follow the same rules, and with no real way for you to know who they are.
To be fair, this isn’t necessarily some hidden conspiracy. In a lot of cases, it’s standard boilerplate that gets copied from one sales contract to the next without much thought. But standard or not, it creates a real exposure — because once you’ve signed it, you’ve agreed to it, whether you read those paragraphs closely or not.
What I Personally Watched Happen to That Information
Here’s the part that isn’t boilerplate. This is what I saw, firsthand, during my time working for a Mexico timeshare company.
Staff were instructed to make copies of clients’ driver’s licenses and passports as part of the sales process — and instructed specifically not to tell the client this was happening. It wasn’t presented as an optional step you could decline. It was just done, quietly, in the background of a transaction the client thought was about buying a vacation property.
At the same time, plenty of clients handed over sensitive information willingly, no instruction needed — especially when the paperwork in front of them was a credit or financing application carrying a name they already trusted. RCI. Interval International. Barclays Bank. Those are real, recognizable names in the timeshare and travel industry, and seeing one printed at the top of a form does exactly what you’d expect: it lowers a person’s guard. Nobody stops to ask hard questions about where their Social Security number is going when the form looks like it came from a company they already know.
Timeshare Sales Staff Are Not Employees
And here’s the part that troubled me most, and still does: the people actually handling that sensitive paperwork — the driver’s license copies, the passport scans, the credit applications — were frequently not employees of the timeshare company itself. They worked in that sales office, wore the badge, sat at the desk, but they weren’t on the company’s payroll. Which means if that information is ever misused down the line, there’s no clear, accountable employer standing behind it. The company can always say its own people never touched it.
I saw one more thing, separately, while working in Jamaica: clients’ personal information and copies of their documents being sent to Mexico without the client’s consent. Not shared under a clause they’d agreed to somewhere in the fine print — sent, across a border, without them ever being asked. I want to be careful here and not overstate what I can prove: I’m not a lawyer, and whether that specific practice violated data protection law depends on exactly what applied at the time and place. What I can tell you plainly is what I witnessed — information and documents crossing a border a client never agreed to.
Put those three things together — undisclosed copying of your most sensitive identity documents, information volunteered in good faith to what looked like a trusted financial partner, and paperwork handled by people with no direct accountability to the company you bought from — and that “national and international” clause stops being something you can just skim past. It’s not hypothetical. I watched how loosely that kind of information moves before it ever reaches a partner or an affiliate.
Continue reading — Part 2 of this series:
Where Your Timeshare Information Really Ends Up (And Who’s Buying It) →
Once your information leaves the sales office, where does it actually go — and who’s on the other end of it? I still get emails right now from people offering to sell lists of timeshare owners’ personal information. In the next article, I’ll show you exactly where this data ends up, and use my own inbox as proof that this market is very real.
Request a Free Timeshare Contract Review Not sure what your own contract actually says about how your information can be shared — or what your real options are? I’ll review it personally, at no cost, and tell you where you stand. No pressure, no obligation.
Related Articles
- What I Saw From the Inside — teaser: “25 years in timeshare sales, including time inside a Mexico timeshare company — here’s exactly how I watched client information get handled.” Card includes its own “Request a Free Timeshare Contract Review” link/button, not just a “read more” link — every exit point from this page should also be a conversion point.
- Where Your Timeshare Information Really Ends Up — teaser: “Collection agencies, resale brokers, international affiliates — and people who email me right now trying to sell owner lists. Here’s where it goes.” Same per-card “Request a Free Timeshare Contract Review”
- What To Do About the Information Risk — teaser: “A practical checklist for protecting yourself if you already own a Mexico timeshare.” Same per-card “Request a Free Timeshare Contract Review” .
- FBI: “Mexican Cartels Targeting Americans in Timeshare Fraud Scams” (June 2024) — https://www.fbi.gov/news/stories/mexican-cartels-targeting-americans-in-timeshare-fraud-scams-fbi-warns
- FBI: “Timeshare Fraud” (victim resources page) — https://www.fbi.gov/how-we-can-help-you/victim-services/national-crimes-and-victim-resources/timeshare-fraud
- FTC Consumer Advice: “Be on the lookout for timeshare resale phonies” — https://consumer.ftc.gov/comment/18098 These are also cited in-line within Series Article 2, where the fraud-pattern discussion lives — this row just makes them visible/skimmable from the landing page too, without a reader having to click into Article 2 first.
PROFECO, Mexico’s federal consumer protection agency.
- Recommendations on Contracting Timeshares — PROFECO’s own guidance on timeshare contracts
- The Timeshare Sector — their sector guide
- File a Complaint — the official online complaint portal
- Concilianet — their free online conciliation service between consumers and companies

