Privacy Policy

1. Who we are

PlayaAquaPark.com is a discovery and enquiry platform for beach activities, water parks and group experiences in Spain. We do not currently operate every activity or location shown on the website; availability is confirmed manually with relevant providers.

2. Data we collect

When you submit an enquiry, we may collect your name, email address, phone number, company, group size, preferred date, destination, activity, budget, message, language and the page where the enquiry started.

If you use the assistant, the messages needed to answer your question are processed. If you choose to request follow-up, your contact details and relevant conversation context are saved as a lead. Hosting and security providers may also process technical data such as IP address, browser, pages visited and timestamps.

3. Why we use data

We use this data to answer questions, manage enquiries in our CRM, contact suitable providers, send lead notifications, improve the service and protect the website against misuse. We process an enquiry to take steps at your request and use legitimate interests for service security and administration.

4. Service providers

We use Vercel for hosting, Supabase for database and admin authentication, Resend for email notifications and OpenAI to generate assistant replies. These providers process only the data needed for their service under their own contractual and security safeguards. Third-party links, such as social media, are governed by the privacy policy of that service once you open them.

5. Cookies and local storage

The public website uses functional browser storage for preferences such as language. The protected management area uses session storage for the signed-in admin session. We do not currently use advertising cookies. We will update this policy and request consent where required before adding non-essential tracking.

6. Retention and security

We normally retain enquiry data for no longer than 12 months, unless it becomes part of an ongoing customer or partner relationship or a longer period is legally required. Access to lead and partner data is restricted to authorised administrators. No internet service can guarantee absolute security.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. You may also complain to the competent data protection authority. Contact us to exercise a privacy right.

8. Changes

We may update this policy when the service or our providers change. The date above shows the latest revision.