Luxtour Ibiza

Legal

Privacy and Cookie Policy

Last updated: 11 September 2026 · Applies to luxtour-ibiza.com

Luxtour Ibiza exists to arrange private villa buyouts with discretion. This Policy explains, in plain terms, what personal data we collect on this website, why we collect it, with whom it is shared, and the rights available to you under the EU General Data Protection Regulation (GDPR). We treat confidentiality as an operating standard, not a marketing line.

1. Who we are

The controller of personal data processed through this website is Luxtour Ibiza (“Luxtour”, “we”, “us”), operating the site luxtour-ibiza.com.

For all privacy matters, including requests to exercise your GDPR rights, please write to luxtouribiza.com@gmail.com. Concierge conversations may also take place on WhatsApp; privacy requests should still be sent by email so we can verify and record them properly.

2. Personal data we collect

Direct inquiry form

When you submit the Direct Inquiry form, we collect the information you provide: name or company, email address, group size, preferred villa category, and proposed check-in and check-out dates. We use this solely to prepare a confidential villa presentation and to reply with availability and terms.

WhatsApp

If you tap a WhatsApp button on this site, you leave our website and open WhatsApp (a service of Meta). We may pre-fill a short message (for example, that you wish to check villa dates). WhatsApp will then process your phone number, profile, and message content under Meta’s own terms. We only see what you choose to send us in that chat. We do not scrape your WhatsApp address book or contacts.

Technical and usage data

Like most professional sites, our servers and security tools may process IP address, browser type, device, referring page, and timestamps. If you accept analytics or advertising cookies, we also receive measurement identifiers described in the Cookie Policy below.

3. Why we process your data and on what basis

We process personal data only for the following purposes:

  • Responding to your inquiry — to send villa options, PDF presentations, and pricing. Legal basis: steps at your request prior to a contract (GDPR Art. 6(1)(b)).
  • Concierge communication — email or WhatsApp follow-up about dates, group size, and logistics. Legal basis: Art. 6(1)(b) and, where appropriate, our legitimate interest in providing a discreet client desk (Art. 6(1)(f)).
  • Analytics — to understand which pages are useful, using Google Analytics 4 and Microsoft Clarity, and only if you accept non-essential cookies. Legal basis: consent (Art. 6(1)(a)).
  • Advertising measurement — to measure campaign performance and limit irrelevant ads, using Meta Pixel and Meta’s server-side Conversions API, and only if you accept advertising cookies. Legal basis: consent (Art. 6(1)(a)).
  • Security and essential operation — to keep the site available, prevent abuse, and remember your cookie choice. Legal basis: legitimate interests (Art. 6(1)(f)).

We do not sell personal data. We do not use your inquiry to run automated credit scoring or profiling that produces legal effects.

4. Who receives your data

Access is limited to the Luxtour concierge team that handles your request. We may also share what is strictly necessary with:

  • Villa owners or their representatives, only once an inquiry is serious enough to check availability — never as an open listing.
  • Infrastructure and email providers that host this website or deliver our correspondence (including Vercel for hosting).
  • Google Ireland Limited / Google LLC, if you consent to analytics (Google Analytics 4, via Google Tag Manager).
  • Meta Platforms Ireland Limited, if you consent to advertising cookies (Meta Pixel and server-side Conversions API), and if you open WhatsApp.
  • Microsoft Corporation, if you consent to analytics (Microsoft Clarity).

Each of those parties acts either as our processor under contract or, in the case of Google, Meta, Microsoft, and WhatsApp, as an independent controller for their own platforms. Villa owners who receive your details to confirm a stay become independent controllers of that booking file.

5. International transfers

Google, Meta, and Microsoft may process data in the United States and other countries outside the European Economic Area. Where that occurs, it is carried out under the EU–US Data Privacy Framework where applicable, and/or Standard Contractual Clauses approved by the European Commission, with supplementary measures those providers publish. WhatsApp messages follow Meta’s transfer terms once you open the app.

6. How long we keep data

Inquiry records (name, email, dates, group size) are kept only as long as needed to prepare your offer and follow up. As a rule, we delete or anonymise unanswered or declined inquiries within 24 months, unless a booking proceeds — in which case we keep what the contract, tax, and insurance require.

Cookie identifiers follow the lifetimes in the table below. You may ask us to erase inquiry data sooner; see your rights.

7. Discretion and security

We apply technical and organisational measures appropriate to a private-client desk: encrypted connections (HTTPS), restricted staff access, and a preference for named, private communication rather than public listing platforms. No method of transmission is perfectly secure; we will notify you and the competent authority if a breach is likely to result in a high risk to your rights, as GDPR requires.

8. Your GDPR rights

If you are in the European Economic Area (or otherwise protected by GDPR), you may exercise the following rights, free of charge, by emailing luxtouribiza.com@gmail.com. We may need to verify your identity before acting.

Right of access

You may request confirmation of whether we process your data and obtain a copy, including the purposes, categories, recipients, and retention period.

Right to rectification

You may ask us to correct inaccurate data — for example, a misspelt name or wrong travel dates — and to complete data that is incomplete.

Right to erasure (“right to be forgotten”)

You may ask us to delete your inquiry and related correspondence where it is no longer needed, you withdraw consent, or processing was unlawful. We may retain a minimal record if the law requires it (for example, a concluded booking or a legal claim).

Right to restriction

You may ask us to freeze processing while a challenge to accuracy or lawfulness is resolved.

Right to data portability

Where processing is based on consent or a contract and carried out by automated means, you may receive the data you provided in a commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible.

Right to object

You may object to processing based on legitimate interests. You may also object at any time to processing for direct marketing, if we ever undertake it. We do not send newsletters from this landing page.

Right to withdraw consent

Where we rely on cookies or advertising consent, you may withdraw it at any time via . Withdrawal does not affect the lawfulness of processing before you withdrew.

Right to lodge a complaint

You may complain to a supervisory authority in the EU Member State of your residence, workplace, or the place of the alleged infringement. For activity connected with Ibiza and Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).

We will respond to access and erasure requests without undue delay and in any event within one month, extendable by two further months for complex requests, as permitted by Art. 12 GDPR.

9. Cookie Policy

This site uses cookies and similar technologies (including pixels and local storage). Strictly essential tools run so the site can function and so we can remember your choice. Analytics and advertising tools run only after you select “Accept All” on our banner. Until then, Google Consent Mode v2 keeps ad_storage, analytics_storage, ad_user_data, and ad_personalization set to denied.

Your preference is stored locally as cookie_consent with the value all or essential. You may change it at any time:

Essential

Required for security, load balancing, and storing your cookie decision. These do not profile you for advertising. Legal basis: legitimate interests and, where applicable, strictly necessary storage under the ePrivacy rules.

Analytics (Google Analytics 4)

If you accept all cookies, we use Google Analytics 4 (measurement ID G-D134W7W6VM) to understand aggregated traffic — for example, which villa concepts are opened. IP addresses are handled under Google’s GA4 configuration; we do not use analytics to identify you by name. You may refuse these cookies without affecting your ability to send an inquiry.

Analytics (Microsoft Clarity)

If you accept all cookies, we use Microsoft Clarity (project ygoj0ypvbl) to understand how the site is used — which sections are opened, where visitors tap, and anonymised session replays. Clarity is not loaded until you consent.

Advertising (Meta Pixel and Conversions API)

If you accept all cookies, we use the Meta Pixel and may send corresponding conversion events from our servers (Meta Conversions API) so that we can measure whether a campaign led to an inquiry and avoid showing you the same ads repeatedly. Meta may combine this with information it already holds if you have a Facebook or Instagram account. These tools are not loaded until you consent.

Tag management

We load Google Tag Manager through a first-party endpoint on a luxtour-ibiza.com subdomain. The manager itself does not replace your consent choice; it only deploys the tags you have allowed.

NameProviderPurposeDuration
cookie_consentLuxtour IbizaStores Accept All or Essential OnlyUntil you change it
_ga, _ga_*Google Analytics 4Audience measurement (if accepted)Up to 24 months
_clck, _clskMicrosoft ClaritySession analytics / heatmaps (if accepted)Up to 13 months / 1 day
_fbp, _fbcMetaAd measurement / attribution (if accepted)Up to 90 days / 7 days
First-party GTMLuxtour IbizaLoads consented tagsSession / as configured

Browser controls can also block cookies. If you block all cookies, parts of the site (including remembering this Policy choice) may not work as intended.

10. Children

This website is intended for adults arranging luxury group stays. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted an inquiry, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy when our tools, the law, or our concierge process changes. The “Last updated” date at the top will always reflect the current version. Material changes will be presented with the same care we expect from a private client relationship.

12. Contact

Luxtour Ibiza
Website: luxtour-ibiza.com
Privacy requests: luxtouribiza.com@gmail.com

If you prefer a faster operational reply about a villa (rather than a formal rights request), you may also use WhatsApp from the site. For access, correction, or erasure, email remains the proper channel.