Privacy policy

Effective: 6 September 2026

Controller

The controller is [[LEGAL_ENTITY]], trading as Marbella Strike. Contact: [[BUSINESS_EMAIL]]. Registered address: [[REGISTERED_ADDRESS]].

What we collect

Booking data may include your name, email, telephone/WhatsApp number, trip selection, date, guest count, booking notes, payment status and customer communications. Payment card data is handled by Stripe and is not stored on the Marbella Strike website.

Why we use it

We process data to provide requested booking services, administer the charter contract, communicate operational information, comply with legal obligations, prevent misuse and protect legitimate business interests. Optional marketing is only sent where legally permitted.

Processors and transfers

Booking infrastructure may use Stripe for payments, Supabase for booking records and the selected hosting provider for website delivery. Their processing is governed by their own contractual data-protection arrangements.

Retention

Booking, accounting and transaction records are kept for periods required by applicable law. Enquiries that do not become bookings are deleted or anonymised when no longer reasonably needed.

Your rights

You may request access, rectification, erasure, restriction, portability or objection where applicable, and may complain to the Spanish Data Protection Agency (AEPD). Requests should be sent to the business email above.