Privacy Policy

1. Who we are

Valnero Ibiza is a trading name of Valnero Concierge Ltd, a company registered in Scotland (company number SC891946) with registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN. We operate in Ibiza, Spain. Because we are established in the UK and also operate in the EU, both UK GDPR and EU GDPR may apply, and you can raise a concern with the UK ICO or the Spanish data protection authority (AEPD). We act as the "data controller" of any personal information you share with us.

2. What data we collect

We only collect what we need to run your trip. Specifically:

• Your name and WhatsApp number — when you message us through the website or social media.
• Travel dates, group size, service preferences, budget — what you share in WhatsApp to help us plan.
• Group members' names and WhatsApp numbers — when you submit your group for the guestlist. You confirm you have their permission to share these details with us.
• Booking details — payment confirmations, supplier confirmations, anything needed to deliver the service.
• Website analytics — limited measurement data via the Meta Pixel if you accept cookies. This is personal data, not anonymous. See our cookie banner for choices.

3. Why we hold it (lawful basis)

• To deliver the service you've asked for — booking guestlist, yachts, tables, etc. (lawful basis: contract / pre-contract).
• To communicate with you and your group about the trip — confirmations, last-minute updates, follow-ups (lawful basis: legitimate interest).
• To improve our service and send relevant information about future seasons — only if you've consented or are an existing customer with a clear opt-out (lawful basis: consent / legitimate interest).
• To meet legal obligations — tax records, anti-fraud checks (lawful basis: legal obligation).

4. Who we share it with

We share the minimum necessary information with:

• Suppliers we book on your behalf — clubs (for guestlist names + ID-matched names), yacht charter companies (lead name + group size), drivers, beach clubs.
• Payment processors — Stripe, Revolut or similar when you pay deposits or balances.
• Meta Platforms (Facebook / Instagram) — limited conversion data (this is personal data) if you accept marketing cookies.
• UK / Spanish tax authorities — only where legally required.

We never sell your data to third parties for marketing.

5. How long we keep it

• WhatsApp conversations and trip data: kept for the duration of the current and following season (so we can serve you again the next year), then archived or deleted on request.
• Booking and payment records: 6 years for UK tax compliance.
• Marketing contact preferences: until you opt out.

6. Your rights under UK GDPR

You have the right to:

• Request a copy of the personal data we hold about you (Subject Access Request).
• Ask us to correct anything inaccurate.
• Ask us to delete your data ("right to be forgotten") — subject to legal record-keeping requirements.
• Ask us to restrict how we use your data in certain circumstances.
• Ask for a copy of your data in a portable, machine readable format (data portability).
• Withdraw consent at any time.
• Object to direct marketing.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), or with the Spanish data protection authority, the AEPD (aepd.es), if you believe we've mishandled your data.

7. Friends and guests added by someone else

If a member of your group adds your WhatsApp number to a Valnero booking on your behalf, our first message to you will identify Valnero, explain how we received your number, and give you a clear way to opt out (reply "remove" and we delete you immediately, no further messages).

8. Cookies

We use a small number of cookies to make the site work and to measure whether our advertising is reaching the right people. On your first visit you can accept or decline non essential cookies via the cookie banner. Your choice is saved, and you can change it at any time using the "Reset Cookie Preferences" button on our Cookies Policy.

See our Cookies Policy for the full list.

9. International transfers

We're based in the UK and operate in Spain (EU). Some of our suppliers and tools (e.g. Meta) may transfer data outside the UK / EEA. We rely on approved safeguards (Standard Contractual Clauses or adequacy decisions) where this happens.

10. Changes to this policy

We'll post any updates to this page with a new "last updated" date. Significant changes affecting how we use your data will be notified directly via WhatsApp if you're an active customer.