Privacy Policy

Last updated: 21/10/2026

1. Who We Are

This Privacy Policy explains how [Full legal company name], trading as Smash Escapes, processes personal data through https://www.smashescapes.com.

Data controller: [Full legal company name] Registered address: [Registered address] Email: [Privacy contact email]

2. Personal Data We Collect

Depending on how you interact with our Website, we may collect:

Contact information: name, email address and telephone number.
Enquiry information: destination, preferred travel dates, group size, budget and service preferences.
Booking information: details necessary to manage a reservation, where applicable.
Communication data: messages and correspondence with our team.
Technical data: IP address, browser type, device information and website usage data, where collected.
Marketing preferences: your newsletter subscription and consent preferences, where applicable.

Please do not submit sensitive personal information unless it is necessary and specifically requested.

3. How We Use Your Data

We process personal data for the following purposes:

To respond to enquiries and provide requested information.
To check availability and coordinate potential bookings.
To manage reservations and provide related services.
To communicate with customers regarding their enquiries and stays.
To send marketing communications where legally permitted.
To operate, secure and improve the Website.
To comply with legal, accounting and regulatory obligations.

4. Legal Bases for Processing

Depending on the purpose, processing is based on:

Pre-contractual steps or contract performance: responding to booking enquiries and managing reservations.
Legitimate interests: handling communications, maintaining Website security and improving our services, where these interests do not override your rights.
Consent: sending marketing communications where consent is required and placing non-essential cookies or similar technologies where applicable.
Legal obligations: retaining information required by tax, accounting or other applicable laws.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data

We may share relevant information with service providers where necessary, including:

Website hosting and technical service providers.
Customer relationship management and email providers.
Booking and property management platforms.
Property owners, managers and relevant service providers when necessary to process an enquiry or reservation.
Professional advisers and public authorities where required by law.

We do not sell personal data to third parties.

6. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where such transfers take place, we will ensure that the applicable legal requirements are met, including appropriate safeguards where required.

Further information about relevant safeguards may be requested using the contact details below.

7. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this Policy, subject to applicable legal obligations.

Enquiry records are retained for [Retention period]. Booking, invoicing and accounting records are retained for the periods required by applicable law. Marketing data is retained until consent is withdrawn or the data is no longer needed.

Technical and analytics data is retained in accordance with the applicable settings and retention periods of the relevant tools.

8. Your Rights

Subject to applicable law, you may have the right to:

Access your personal data.
Request correction of inaccurate data.
Request deletion of your data.
Request restriction of processing.
Object to certain processing activities.
Request data portability.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with the competent data protection authority.

To exercise your rights, contact us at [email protected]

We may need to verify your identity before responding.

If you are located in Spain, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD), at https://www.aepd.es.

9. Cookies and Similar Technologies

The Website may use essential cookies and, where configured, analytics, functionality or advertising technologies.

Non-essential cookies and similar technologies will only be activated where required consent has been obtained.

For further information, please consult our Cookie Policy and the Website's cookie preference settings.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no method of transmission or storage can be guaranteed to be completely secure.

11. Third-Party Websites

Our Website may contain links to external websites. We are not responsible for the privacy practices of third-party websites.

Please consult their privacy policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The latest version will be published on this page with its updated date.

13. Contact

For questions or requests relating to personal data, contact:

[email protected]