Traslados privados en la Costa del Sol

1. Purpose

This policy describes the general criteria we use to retain and delete personal data related to private transfer enquiries and bookings.

2. General principles

We retain data for as long as necessary to fulfil the purpose for which it was collected.
We may retain data for legally required periods (for example, tax/accounting obligations) and while liabilities may arise.
We apply reasonable measures to limit access and use of data during the retention period.

3. Retention categories and criteria

3.1. Enquiries not converted into bookings

We retain data from unconfirmed enquiries for a reasonable period to manage the request, follow up and handle any later questions.

3.2. Confirmed bookings and service delivery

Data related to confirmed bookings is retained as needed to deliver the service and handle incidents, changes, cancellations, no-show cases and customer support.

3.3. Invoicing and legal obligations

Data required for invoicing and tax/accounting obligations will be retained for the applicable legal periods.

3.4. Payments (Stripe)

Payments are processed through Stripe. We do not store full card details. We retain the information required to evidence the payment, reconcile the booking and handle any incidents or refunds when applicable.

3.5. Communications (email/WhatsApp)

We may retain communications related to a booking or support for as long as needed to address the request and, when relevant, to evidence actions taken or resolve complaints.

4. Deletion and anonymisation

When data is no longer needed or once the applicable retention period expires, we will delete it or, where appropriate, anonymise/block it using reasonable legal and technical criteria.

5. Your rights

You may exercise your data protection rights (access, rectification, erasure, objection, restriction and portability) as described in our Privacy policy.