Privacy and Cookie Policy

1. Data we collect

We may collect contact details (such as name, email, and phone number), conversation content, and technical metadata required to operate the service.

If you contact us via WhatsApp, we may receive data sent by Meta WhatsApp Cloud API, such as conversation identifier, sender number, and message content.

2. How we use data

We use information to respond to inquiries, provide support, manage bookings, and improve customer experience.

We may also use technical logs for security, abuse prevention, and troubleshooting.

3. Data sharing

We do not sell personal data.

We may share information with providers that run our infrastructure (for example hosting, messaging, and database services), only as needed to deliver the service.

4. Retention and security

We keep information for as long as necessary for operational, legal, and support purposes.

We apply reasonable security measures to protect data from unauthorized access.

5. Cookies, measurement, and your preferences

We use Google Tag Manager (GTM-52VQGM2R) to manage measurement. With Analytics Consent, Google Analytics 4 may measure site use. With Marketing Consent, Google Ads and Meta may measure campaigns and conversions. These optional categories start denied and can be selected independently.

Meta (Meta Pixel) measures how well our ads on Facebook and Instagram perform: pages viewed, offers viewed, quote requests, carts, booking starts, and confirmed purchases. Meta is activated only by Marketing Consent: it does not load before you decide, nor when you accept only Analytics or reject optional categories. We do not send Meta your name, email, phone number, nationality, ages, dietary restrictions, or the text of your WhatsApp messages.

Turitop provides requested technical functions for checking availability and completing bookings. Those necessary functions remain available when you reject Analytics and Marketing; optional measurement, attribution, and advertising respect your choice.

We remember the versioned preference for six months. You can change it or withdraw optional consent through “Privacy preferences” in the footer.

If you withdraw Marketing Consent, we stop sending events to Google Ads and Meta from that moment on. Withdrawal does not delete data those providers have already received; their own privacy policies and tools apply to it.

This disclosure requires legal review before production publication.

6. Your rights and contact

You may request access, correction, or deletion of personal data, subject to applicable legal obligations.

For privacy questions or data deletion requests: hola@depasseios.com.