Privacy Policy

BookXplor ("we", "our", "us") operates the website bookxplor.com — a tourism marketplace connecting visitors with experiences, restaurants and services across Southern Spain. We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.

Our Data Controller contact is: info@bookxplor.com

We may collect the following personal data:

• Identity data: name, email address, telephone number
• Account data: username, password (hashed), profile information
• Transaction data: booking details, payment records
• Usage data: pages visited, searches performed, time on site
• Marketing data: communication preferences, newsletter subscriptions
• Technical data: IP address, browser type, device information, cookies

We use your personal data to:

• Create and manage your account
• Process bookings and payments
• Send booking confirmations and transactional emails
• Send marketing communications (with your consent)
• Improve and personalise your experience on the platform
• Comply with legal obligations
• Detect and prevent fraud or abuse

We process your data under the following legal bases:

• Contract: to fulfil bookings and provide services you have requested
• Consent: for marketing emails and optional cookies
• Legitimate interest: for platform security, fraud prevention and analytics
• Legal obligation: to comply with tax, accounting and regulatory requirements

We do not sell your personal data. We may share it with:

• Experience and restaurant providers — to fulfil your bookings
• Payment processors — Stripe and/or Wix Payments for secure transactions
• Email service providers — to send transactional and marketing communications
• Analytics platforms — to understand usage patterns (anonymised where possible)
• Legal authorities — where required by law or to protect rights

All third-party processors are subject to data processing agreements and required to protect your data.

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Account data is typically retained for up to 7 years after your last activity. You may request deletion at any time (subject to legal retention requirements).

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at info@bookxplor.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

We use cookies and similar technologies on our platform. Please see our Cookie Policy for full details on what cookies we use and how to manage them.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Continued use of the platform after changes constitutes acceptance.

For any privacy-related questions, contact our Data Protection contact at: info@bookxplor.com