Privacy Policy

Last updated: May 2026

1. Data Controller

Pois Ibiza
Calle de la Cruz 7, 07800 Ibiza, Islas Baleares, Spain
VAT: ESX1985999H
Email: info@poisibiza.com
Phone: +34971423557

2. Data We Collect

We collect personal data that you provide directly to us, or that is generated through your use of our website and services:

• Identity data: first name, last name
• Contact data: email address, phone number, shipping and billing address
• Transaction data: details of purchases, order history, payment method used
• Technical data: IP address, browser type, device information, pages visited, time spent on site
• Marketing data: your preferences for receiving communications from us, and your interactions with our emails

We do not collect or store payment card details. All card payments are processed directly by our payment providers through encrypted and certified systems.

3. How We Use Your Data

We use your personal data for the following purposes:

• Order processing: to process and fulfil your purchases, manage payments, and coordinate delivery
• Customer support: to respond to enquiries, manage returns and refunds
• Legal obligations: to comply with Spanish fiscal law, including retention of transaction records
• Fraud prevention: to protect our customers and business from fraudulent activity
• Marketing communications: to send you newsletters, promotions, and updates about Pois Ibiza — only with your explicit consent
• Website improvement: to analyse how visitors use our site and improve the user experience

4. Legal Basis for Processing

• Performance of a contract — processing your order and managing your purchase
• Legal obligation — retention of fiscal and accounting records as required by Spanish law (minimum 5 years)
• Legitimate interest — fraud prevention, website security, and basic site analytics
• Consent — marketing communications via email (Klaviyo), and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Who We Share Your Data With

We may share your data with trusted third parties who assist us in operating our website and serving you. All processors are bound by data processing agreements and may not use your data for their own purposes.

• Payment processors: PayPal and our card payment gateway, for secure transaction processing
• Shipping carriers: to deliver your orders (name and delivery address shared only)
• Email marketing platform: Klaviyo Inc., for newsletter and marketing communications (only if you have given consent)
• Analytics providers: Google Analytics, for website traffic analysis (anonymised data)
• Advertising platforms: Meta (Facebook/Instagram), for retargeting campaigns (only with your consent)
• IT and hosting providers: for website infrastructure and security

We do not sell your personal data to any third party.

6. International Transfers

Some of our service providers (including Klaviyo and Google) may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

7. Data Retention

• Order and transaction data: retained for a minimum of 5 years as required by Spanish fiscal law
• Marketing data: retained until you withdraw consent or unsubscribe
• Technical/analytics data: retained for up to 26 months (Google Analytics default)
• Customer support correspondence: retained for 2 years after resolution

8. Your Rights

Under GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of the personal data we hold about you
• Right to rectification: to correct inaccurate or incomplete data
• Right to erasure: to request deletion of your data, where no legal obligation requires us to retain it
• Right to restriction: to limit how we process your data in certain circumstances
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interest or for direct marketing purposes
• Right to withdraw consent: to withdraw consent for marketing communications at any time, without affecting prior processing

To exercise any of these rights, please contact us at info@poisibiza.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Authority:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es

9. Cookies

Our website uses cookies to provide essential functionality, analyse traffic, and deliver personalised advertising. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent update is shown at the top of this page. We encourage you to review this page periodically.

11. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at:
info@poisibiza.com