Legal
Privacy and Cookie Policy
Last updated: 11 September 2026 · Applies to luxtour-ibiza.com
Luxtour Ibiza exists to arrange private villa buyouts with discretion. This Policy explains, in plain terms, what personal data we collect on this website, why we collect it, with whom it is shared, and the rights available to you under the EU General Data Protection Regulation (GDPR). We treat confidentiality as an operating standard, not a marketing line.
1. Who we are
The controller of personal data processed through this website is Luxtour Ibiza (“Luxtour”, “we”, “us”), operating the site luxtour-ibiza.com.
For all privacy matters, including requests to exercise your GDPR rights, please write to luxtouribiza.com@gmail.com. Concierge conversations may also take place on WhatsApp; privacy requests should still be sent by email so we can verify and record them properly.
2. Personal data we collect
Direct inquiry form
When you submit the Direct Inquiry form, we collect the information you provide: name or company, email address, group size, preferred villa category, and proposed check-in and check-out dates. We use this solely to prepare a confidential villa presentation and to reply with availability and terms.
If you tap a WhatsApp button on this site, you leave our website and open WhatsApp (a service of Meta). We may pre-fill a short message (for example, that you wish to check villa dates). WhatsApp will then process your phone number, profile, and message content under Meta’s own terms. We only see what you choose to send us in that chat. We do not scrape your WhatsApp address book or contacts.
Technical and usage data
Like most professional sites, our servers and security tools may process IP address, browser type, device, referring page, and timestamps. If you accept analytics or advertising cookies, we also receive measurement identifiers described in the Cookie Policy below.
3. Why we process your data and on what basis
We process personal data only for the following purposes:
- Responding to your inquiry — to send villa options, PDF presentations, and pricing. Legal basis: steps at your request prior to a contract (GDPR Art. 6(1)(b)).
- Concierge communication — email or WhatsApp follow-up about dates, group size, and logistics. Legal basis: Art. 6(1)(b) and, where appropriate, our legitimate interest in providing a discreet client desk (Art. 6(1)(f)).
- Analytics — to understand which pages are useful, using Google Analytics 4 and Microsoft Clarity, and only if you accept non-essential cookies. Legal basis: consent (Art. 6(1)(a)).
- Advertising measurement — to measure campaign performance and limit irrelevant ads, using Meta Pixel and Meta’s server-side Conversions API, and only if you accept advertising cookies. Legal basis: consent (Art. 6(1)(a)).
- Security and essential operation — to keep the site available, prevent abuse, and remember your cookie choice. Legal basis: legitimate interests (Art. 6(1)(f)).
We do not sell personal data. We do not use your inquiry to run automated credit scoring or profiling that produces legal effects.
4. Who receives your data
Access is limited to the Luxtour concierge team that handles your request. We may also share what is strictly necessary with:
- Villa owners or their representatives, only once an inquiry is serious enough to check availability — never as an open listing.
- Infrastructure and email providers that host this website or deliver our correspondence (including Vercel for hosting).
- Google Ireland Limited / Google LLC, if you consent to analytics (Google Analytics 4, via Google Tag Manager).
- Meta Platforms Ireland Limited, if you consent to advertising cookies (Meta Pixel and server-side Conversions API), and if you open WhatsApp.
- Microsoft Corporation, if you consent to analytics (Microsoft Clarity).
Each of those parties acts either as our processor under contract or, in the case of Google, Meta, Microsoft, and WhatsApp, as an independent controller for their own platforms. Villa owners who receive your details to confirm a stay become independent controllers of that booking file.
5. International transfers
Google, Meta, and Microsoft may process data in the United States and other countries outside the European Economic Area. Where that occurs, it is carried out under the EU–US Data Privacy Framework where applicable, and/or Standard Contractual Clauses approved by the European Commission, with supplementary measures those providers publish. WhatsApp messages follow Meta’s transfer terms once you open the app.
6. How long we keep data
Inquiry records (name, email, dates, group size) are kept only as long as needed to prepare your offer and follow up. As a rule, we delete or anonymise unanswered or declined inquiries within 24 months, unless a booking proceeds — in which case we keep what the contract, tax, and insurance require.
Cookie identifiers follow the lifetimes in the table below. You may ask us to erase inquiry data sooner; see your rights.
7. Discretion and security
We apply technical and organisational measures appropriate to a private-client desk: encrypted connections (HTTPS), restricted staff access, and a preference for named, private communication rather than public listing platforms. No method of transmission is perfectly secure; we will notify you and the competent authority if a breach is likely to result in a high risk to your rights, as GDPR requires.
8. Your GDPR rights
If you are in the European Economic Area (or otherwise protected by GDPR), you may exercise the following rights, free of charge, by emailing luxtouribiza.com@gmail.com. We may need to verify your identity before acting.
Right of access
You may request confirmation of whether we process your data and obtain a copy, including the purposes, categories, recipients, and retention period.
Right to rectification
You may ask us to correct inaccurate data — for example, a misspelt name or wrong travel dates — and to complete data that is incomplete.
Right to erasure (“right to be forgotten”)
You may ask us to delete your inquiry and related correspondence where it is no longer needed, you withdraw consent, or processing was unlawful. We may retain a minimal record if the law requires it (for example, a concluded booking or a legal claim).
Right to restriction
You may ask us to freeze processing while a challenge to accuracy or lawfulness is resolved.
Right to data portability
Where processing is based on consent or a contract and carried out by automated means, you may receive the data you provided in a commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible.
Right to object
You may object to processing based on legitimate interests. You may also object at any time to processing for direct marketing, if we ever undertake it. We do not send newsletters from this landing page.
Right to withdraw consent
Where we rely on cookies or advertising consent, you may withdraw it at any time via . Withdrawal does not affect the lawfulness of processing before you withdrew.
Right to lodge a complaint
You may complain to a supervisory authority in the EU Member State of your residence, workplace, or the place of the alleged infringement. For activity connected with Ibiza and Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).
We will respond to access and erasure requests without undue delay and in any event within one month, extendable by two further months for complex requests, as permitted by Art. 12 GDPR.
10. Children
This website is intended for adults arranging luxury group stays. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted an inquiry, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy when our tools, the law, or our concierge process changes. The “Last updated” date at the top will always reflect the current version. Material changes will be presented with the same care we expect from a private client relationship.
12. Contact
Luxtour Ibiza
Website: luxtour-ibiza.com
Privacy requests: luxtouribiza.com@gmail.com
If you prefer a faster operational reply about a villa (rather than a formal rights request), you may also use WhatsApp from the site. For access, correction, or erasure, email remains the proper channel.
