This Privacy Policy explains how Hike Club ("we", "us", "our") collects, uses, stores and protects your personal data when you use hike-club.com or book one of our hikes. We comply with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.
1. Data controller
Hike Club
Carrer del Kiwi 55
Jesús, 07819
Santa Eulària des Riu, Ibiza, Spain
Email: info@hike-club.com
2. What data we collect
- Account & booking data: name, email, phone, date of birth, emergency contact, hike preferences.
- Inquiry data (WhatsApp, contact form, email): name, phone number, email (if provided) and information about the hike or service you ask about. When you tap our WhatsApp button we ask for your name before opening the chat so we can address you properly.
- Health information: only what you voluntarily share on the waiver (allergies, medication, relevant conditions).
- Payment data: processed by our payment provider; we never store full card details.
- Technical data: IP address, browser type, device, pages visited (via cookies and analytics).
- Communications: messages you send us by email, contact form, WhatsApp or social media.
3. Why we collect it & CRM storage
When you contact us - for example through the WhatsApp button on this website - we store the details you share (name, phone number, email if provided, and information about the hike or service you asked about) in our customer relationship management (CRM) system. We do this because it is necessary to respond to your inquiry and to manage the potential customer relationship that may follow.
- To process and manage your bookings, payments and waivers.
- To reply to your questions and follow up on your inquiry.
- To communicate about your hike (confirmation, meeting point, weather updates).
- To ensure your safety during the activity.
- To comply with legal, tax and accounting obligations.
- To improve our website, services and customer support.
4. Marketing - only with your consent
We will only use your details for marketing if you have given us specific, separate consent. Marketing includes:
- Adding you to our newsletter.
- Sending promotional WhatsApp messages.
- Sending marketing emails about future hikes, events or offers.
Answering an inquiry over WhatsApp, email or the contact form is not consent to marketing. You can withdraw any marketing consent at any time by replying "STOP" on WhatsApp, clicking the unsubscribe link in any email, or emailing info@hike-club.com.
5. Legal basis
We process data on the basis of (a) the contract you enter into when booking, (b) your consent for marketing and non-essential cookies, (c) our legitimate interest in answering inquiries, managing the potential customer relationship and improving our business, and (d) legal obligations.
6. Sharing your data
We share data only with:
- Our guides, strictly for the hike you've booked.
- Payment processors, CRM, email and hosting providers acting under data-processing agreements.
- Authorities when legally required.
We never sell your personal data.
7. International transfers
Some of our service providers are based outside the EU/EEA. When data is transferred, we use Standard Contractual Clauses or equivalent safeguards.
8. How long we keep your data
- Booking and waiver records: up to 5 years for legal, tax and insurance reasons.
- Inquiries in our CRM (incl. WhatsApp): up to 24 months from our last contact, then deleted or anonymised - unless a booking follows, in which case the booking retention applies.
- Marketing data: kept until you unsubscribe or withdraw consent.
- Analytics data: anonymised or deleted within 14 months.
9. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify / modify data that is inaccurate or incomplete.
- Delete your data ("right to be forgotten") where the law allows.
- Restrict or object to certain processing.
- Port your data to another provider.
- Withdraw consent at any time, including for marketing.
To exercise any of these rights, email info@hike-club.com. You can also file a complaint with the Spanish data protection authority (AEPD, aepd.es).
10. Security
We use industry-standard technical and organisational measures (encryption, access controls, secure hosting) to protect your data. No system is 100% secure, so we encourage you to use a strong, unique password for your account.
11. Children
Our services are not directed at children under 16. We collect minors' data only via a parent or legal guardian who books on their behalf.
12. Changes
We may update this Privacy Policy. The latest version is always available on this page.
13. Contact
Questions or requests? Email info@hike-club.com.
