Legal
Privacy Policy
Last updated: May 2026
Who we are
This privacy policy applies to Tuk & Tapas Málaga, operated by Costa del Tuk S.L., registered in Spain.
When you book a tour, visit our website, or contact us, we may collect and use your personal data. This policy explains what we collect, why, and how we protect it.
Data controller: Costa del Tuk S.L. · CIF: B88849971
Av. Ingeniero José María Garnica, 3, 2º-5, 29002 Málaga, España
Inscrita en el Registro Mercantil de Málaga, Inscripción 1ª, Hoja MA-199094
info@tukandtapas.com · +34 686 10 11 88
What data we collect
We only collect what we need to run your booking and communicate with you:
- Booking data — name, email address, phone number, number of passengers, selected tour and date
- Payment data — processed securely by Stripe. We never see or store your card details
- Communication data — messages you send us via email or WhatsApp
- Usage data — pages visited, time on site, device type (via Google Analytics, anonymised)
Why we use your data
- To process your booking — confirm your tour, send reminders and updates
- To process payment — securely via Stripe
- To respond to your messages — when you contact us by email or WhatsApp
- To improve our website — via anonymised analytics
- To comply with legal obligations — tax and accounting records as required by Spanish law
Legal basis (GDPR)
- Contract — booking data is necessary to fulfil your tour
- Legitimate interests — analytics to understand how our site is used
- Legal obligation — retaining financial records as required by Spanish law
- Consent — cookies and tracking, which you can accept or decline
Who we share your data with
We do not sell your data. We share it only with trusted third-party services needed to run our business:
All third parties are GDPR-compliant and process data only as necessary.
How long we keep your data
- Booking records — 5 years, as required by Spanish tax law
- Analytics data — 14 months (Google Analytics default)
- Communications — up to 12 months after your last contact
Your rights
Under GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (where legally possible)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email us at info@tukandtapas.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish data protection authority: AEPD — Agencia Española de Protección de Datos.
Cookies
We use cookies to make the website work and to understand how it is used. You can accept or decline non-essential cookies when you first visit the site.
- Essential cookies — required for the booking widget to function
- Analytics cookies — Google Analytics, only with your consent
You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.
Contact
Questions about this policy or your data? Get in touch:
info@tukandtapas.com
Costa del Tuk S.L. · Málaga, Spain