Privacy Policy

Orange Amigos (“we”, “us”, “our”) is a luxury villa rental company based in Ibiza, Spain. Our website is orangeamigos.com. You can reach us at infoibiza@orangeamigos.com.

We are committed to protecting your personal data and to operating transparently. This policy explains what we collect, why we collect it, and how you can exercise your rights.

We collect personal data only when you voluntarily provide it, or when it is generated automatically during your visit:

• Contact & enquiry data: name, email address, phone number, travel dates, and any message you submit via our contact or enquiry forms.
• Newsletter data: email address if you subscribe to our mailing list.
• Technical data: IP address, browser type, pages visited, time on site, and referrer URL — collected automatically via cookies and analytics tools.
• Authentication data: the access code used to view gated villa details (stored as a short-lived cookie; passwords are never stored in plain text).

Where GDPR applies, we rely on the following legal bases to process your data:

• Legitimate interests — to respond to enquiries and operate our business.
• Consent — for analytics and marketing cookies, and for newsletter subscriptions. You may withdraw consent at any time.
• Contract — to fulfil a booking or service agreement you have entered into with us.
• Legal obligation — where required by applicable law.

• To respond to enquiries and provide the services you request.
• To send marketing communications (only with your explicit consent).
• To improve our website through aggregated, anonymised analytics.
• To comply with legal and regulatory obligations.

We use cookies to make our site work and to understand how it is used. For full details — including a breakdown of every cookie we set — please read our Cookie Policy.

We do not sell your personal data. We may share it only with:

• Service providers acting on our behalf — such as Netlify for hosting and form processing, and analytics providers.
• Professional advisers such as lawyers or accountants where necessary.
• Authorities if required to do so by law.

All third parties are contractually required to keep your data secure and to use it only for the purposes we specify.

Some of our service providers are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission.

We retain personal data only for as long as necessary:

• Enquiry and contact data: up to 3 years from last contact.
• Newsletter data: until you unsubscribe.
• Analytics data: as configured in our analytics platform (typically 26 months).

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict processing.
• Receive your data in a structured, machine-readable format (data portability).
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our site is served over HTTPS at all times, and access to personal data is restricted to personnel who need it to perform their duties.

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have done so inadvertently, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top. Continued use of our site after changes are posted constitutes acceptance of the revised policy.

For any privacy-related questions or requests: