Legal
Privacy Policy
Last updated: March 2026
1. Data Controller
Your personal data is controlled by Celebrity Level S.L., P.º de la Castellana, 81, 28046 Madrid, Spain. Email: hi@bookaroa.com
2. Data We Collect
We collect the following categories of personal data:
- Identity data: name, email address
- Contact data: phone number, correspondence
- Transaction data: booking history, payment references
- Technical data: IP address, browser type, pages visited
- Profile data: preferences, trip requests, feedback
3. How We Use Your Data
We use your data to:
- Process and manage your bookings
- Communicate with you about your trips
- Improve our platform and services
- Comply with legal obligations
- Send relevant updates (with your consent)
4. Legal Basis
We process your data on the basis of contract performance (to deliver booked services), legitimate interests (platform security and improvement), legal compliance, and consent where required under GDPR and Spanish data protection law (LOPDGDD).
5. Data Sharing
We share your data only with the concierge assigned to your booking, and with trusted infrastructure providers (hosting, payment processing). We do not sell your data to third parties.
6. Data Retention
We retain your data for as long as necessary to fulfil the purposes above, and in accordance with Spanish legal retention requirements (minimum 5 years for transactional records).
7. Your Rights
Under GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Object to processing
- Data portability
- Lodge a complaint with the AEPD (agpd.es)
To exercise your rights, email hi@bookaroa.com.
8. Cookies
We use essential cookies to operate the platform and analytics cookies (with consent) to understand usage. You can manage cookie preferences in your browser settings.
9. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
10. Updates
We may update this policy periodically. Material changes will be communicated via email or a notice on the platform.