Privacy - Simply eBikes España GDPR Compliance
🔒

Privacy Policy

Simply eBikes España - Protecting Your Data & Privacy Rights

📧 Data Controller Contact Information

Company: EcoBicis Hoteles SL

Data Controller: Paul Kennard (Founder & CEO)

Email: [email protected]

Location: Based in Mazarron, Spain | Operating across España

🔒 Information We Collect

To provide our premium eBike rental and cycling tourism services, we collect the following types of information:

• Personal Details: Name, email address, phone number when you create an account or make bookings

• Booking Information: Rental dates, location preferences, eBike selections, hotel partnership details

• Payment Data: Processed securely via Stripe (we do not store credit card details on our servers)

• Communication Records: Support emails, booking confirmations, and customer service interactions

• Technical Data: App usage information for improving our automated booking system and route recommendations

🎯 How We Use Your Information

Your information is used exclusively for legitimate business purposes:

• Process and confirm your eBike bookings through our automated system

• Send booking confirmations and important updates via our verified SendGrid email system

• Provide customer support and respond to inquiries within 24 hours

• Facilitate hotel partnership bookings and coordination across España

• Develop personalized cycling route recommendations and tourism experiences

• Improve our app functionality and customer experience

• Comply with legal obligations and payment processing requirements

🌟 Award-Winning Service: Our data practices support the same quality standards that earned Simply eBikes recognition in Which magazine and Bike Biz, ensuring professional and secure handling of your information throughout your cycling adventure.

🛡️ Data Protection & Security

We implement industry-leading security measures to protect your information:

• Encryption: All data stored securely using industry-standard encryption protocols

• Payment Security: Payment processing handled exclusively by Stripe (PCI DSS compliant)

• Email Security: Communications via verified SendGrid system with domain authentication

• Database Security: Secure hosting via Adalo platform with enterprise-grade protection

• Access Control: Limited access to personal data on strict need-to-know basis

• No Third-Party Sharing: Data not shared except as required for booking fulfillment and hotel partnerships

• Retention Policy: Data retained only as long as necessary for business and legal purposes

⚖️ Your Rights Under GDPR

As a business operating in España, we fully comply with the General Data Protection Regulation (GDPR). You have the following rights:

• Right to Access: Request a copy of all personal data we hold about you

• Right to Rectification: Correct any inaccurate or incomplete information

• Right to Erasure: Request deletion of your personal data under certain conditions

• Right to Restriction: Limit how we process your data in specific circumstances

• Right to Data Portability: Receive your data in a portable, machine-readable format

• Right to Object: Object to certain types of data processing

• Right to Withdraw Consent: Withdraw consent for data processing at any time

• Right to Lodge a Complaint: Contact your local data protection authority if you have concerns

🤝 Third-Party Services

We work with trusted, industry-leading partners to provide our services securely:

• Stripe: Secure payment processing with full PCI DSS compliance and fraud protection

• SendGrid: Professional email delivery system with domain verification and authentication

• Adalo: No-code platform hosting our automated booking application with enterprise security

• Hotel Partners: Verified accommodation providers across España for integrated tourism experiences

📞 Contact for Privacy Matters

For any privacy-related questions, concerns, or to exercise your GDPR rights, please contact us:

Privacy Inquiries: [email protected]

Subject Line: "Privacy Policy Inquiry - [Your Request]"

Response Time: Within 72 hours (as required by GDPR)

Languages: English, Spanish

📋 Changes to This Policy

We may update this privacy policy to reflect changes in our services, legal requirements, or data protection practices. We will notify you of any significant changes through:

• Email notification to your registered address

• Prominent notice in our mobile application

• Updated notice on this website

Continued use of our services after changes indicates acceptance of the updated policy.

Last Updated: January 7, 2025

Policy Version: 1.0

Next Review Date: July 7, 2025