Privacy Policy

This Privacy Policy explains how Plur Ibiza ("Plur Ibiza", "we", "us", or "our") collects, uses, shares, and protects your personal data when you visit www.pluribiza.com (the "Site") or use our booking services. We are committed to processing your data in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

1. Who we are (Data Controller)

Plur Ibiza is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at info@pluribiza.com. We are based in Ibiza, Spain.

2. The data we collect

Depending on how you use the Site, we may collect:

• Identity & contact data — name, email address, and phone number.
• Booking data — the villas, boats, trips, boat parties, or services you book, dates, guest counts, and any preferences you share.
• Payment data — payments are processed by our payment providers (Stripe and PayPal). We do not store full card details on our servers; we receive confirmation of payment status only.
• Account data — if you register, your login credentials and, where you choose social login, basic profile information from Google or Facebook (such as name and email).
• Technical & usage data — IP address, device and browser information, and how you interact with the Site, including referral and campaign (UTM) parameters.

3. How and why we use your data (legal bases)

• To provide our services — creating and managing your bookings and account. Legal basis: performance of a contract.
• To communicate with you — booking confirmations, payment receipts, and service updates. Legal basis: performance of a contract / legitimate interests.
• To improve and secure the Site — analytics, error monitoring, and fraud prevention. Legal basis: legitimate interests.
• Marketing — only where you have given consent, and you may withdraw consent at any time. Legal basis: consent.
• Legal compliance — meeting tax, accounting, and other legal obligations. Legal basis: legal obligation.

4. Sharing your data

We share data only with service providers ("processors") who help us run our business, under appropriate contractual safeguards. These include payment providers (Stripe, PayPal), email delivery (Resend), customer relationship management (HubSpot), error monitoring (Sentry), hosting and content delivery providers, and — where you use social login — Google and Facebook. We do not sell your personal data.

5. International transfers

Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

6. How long we keep your data

We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting, or reporting requirements. Booking and payment records are typically retained for the period required by Spanish tax law.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict our processing of your data.
• Request portability of your data.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info@pluribiza.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Cookies

We use cookies and similar technologies. For details and how to manage your preferences, see our Cookie Policy.

9. Children

Our services are not directed at children under 16, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision.

11. Contact us

For any questions about this policy or your personal data, contact us at info@pluribiza.com.