Privacy Policy — Ibiza Best Car

Data controller

The controller of your personal data is Ibiza Best Car, whose full identification appears in our Legal Notice. You can contact us about privacy at info@ibizabestcar.com.

What data we collect

We collect only the data needed to provide our services. When you make a booking through the website we collect:

Identity and contact details — first name, last name, email address and phone number.
Booking details — the vehicle, yacht or service selected, dates, delivery/pick-up location and method, and similar reservation information.
Payment status — the payment method chosen and a payment reference/status. Card details are entered directly with our payment provider and are never received or stored by us (see “Payments”).

If you contact us directly by WhatsApp or email, we process the contact details and the content of your message in order to respond. We do not use cookies for advertising and we run no analytics or tracking on this website.

Why we use it and our legal basis

To manage your booking and provide the service — legal basis: performance of a contract.
To send booking confirmations and communicate with you about your reservation — performance of a contract.
To take payment and prevent fraud — performance of a contract and our legitimate interest in securing transactions.
To comply with accounting, tax and other legal obligations — legal obligation.
To respond to enquiries you send us — our legitimate interest in answering you (or steps prior to a contract).

Payments

Card payments and Apple Pay / Google Pay are processed by Stripe. Your card details are entered inside Stripe’s secure fields and sent directly to Stripe; they never pass through or get stored on our servers. We retain only a Stripe payment reference and the payment status. Cryptocurrency payments, where offered, are processed by NOWPayments. These providers act as independent controllers/processors for the payment and apply their own privacy terms.

Service providers and international transfers

We do not sell your data. We share it only with providers that help us run the service, under appropriate agreements:

Supabase — secure database hosting of booking records.
Stripe (and NOWPayments, if used) — payment processing.
Resend — sending booking confirmation and notification emails.
Vercel — website hosting and content delivery.
Google Maps — the interactive map on our Contact page (loaded only on that page).

Some of these providers are based outside the European Economic Area (for example in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep your data

We keep your booking data for as long as necessary to provide the service and to meet our legal obligations — in particular Spanish accounting and tax retention periods. Concrete retention periods will be set by Ibiza Best Car [to be confirmed by Ibiza Best Car]. After the applicable period, data is deleted or anonymised.

Your rights

You have the right to access, rectify and erase your data, and to restrict or object to its processing, as well as the right to data portability and to withdraw consent at any time. To exercise these rights, contact us at info@ibizabestcar.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), a strict content-security policy, restricting card data to our payment provider, rate limiting, and authenticated payment notifications. No booking data is exposed through any public endpoint.

Cookies

This website uses only functional browser storage and certain third-party cookies from Stripe and Google Maps. Full details are in our Cookie Policy.

Changes to this policy

We may update this Privacy Policy to reflect changes in our services or the law. The date at the top shows the latest revision.