No products in the cart.
At Namiblu Beach S.L., we take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your information when you access and use our food and beverage delivery platform, available through our website, WhatsApp, and QR codes in partner hotels in Mallorca.
1. Who We Are
NamiBlu Beach is a food and beverage delivery platform by the beach operating in Mallorca, Spain. Our services can be accessed via WhatsApp, QR codes in partner hotels, and our website.
- Owner: Namiblu Beach S.L
- Registered Address: Calle D’ Ovidi, number 2, 2nd Floor, 07610 Palma, Illes Balears
- Tax ID: B70761721
- Email: privacidad@namiblubeach.com
2. Information and Consent
By reading this Privacy Policy, the user is informed about how NamiBlu Beach collects, processes, and protects the personal data provided through the WhatsApp chat and made available through the website www.namiblubeach.com (hereinafter, the “Website”), as well as data derived from their browsing and any other data they may provide to NamiBlu Beach in the future.
By accessing and using our services, the user declares that they have carefully read this Privacy Policy, which has been written clearly and simply to facilitate understanding, freely and voluntarily deciding whether to provide their personal data to NamiBlu Beach. However, if the user has any questions about its content or about the processing of their data, they can contact us via email at privacidad@namiblubeach.com.
3. Purposes of Data Processing
We use your personal data to:
- Manage and deliver your orders correctly.
- Facilitate contact and customer service.
- Send you notifications about the order status.
- Improve our services through statistical analysis (Google Analytics, Meta Pixel).
- Send you commercial information (only if you have given your consent).
- Ensure security and prevent fraud.
4. Personal Data We Collect
NamiBlu Beach may process the following categories of data:
- Contact Data: When you use our service, we may collect your contact details. This includes your phone number through which you place the order and, if provided, we may also collect your name and email address.
- Order Data: The food items selected by users, order frequency, and order value.
- Geolocation Data: We only collect your live GPS Location, which you provide yourself, for order delivery purposes.
- Payment Data: NamiBlu Beach uses the Stripe platform for secure payments. It works through payment tokenization, which is a security technique that replaces sensitive payment information, such as credit card numbers, with a unique set of random characters called a “token.” This system will only provide us with the last 4 digits of your card. For more information about how Stripe works, you can review their privacy policy.
- Other Data: We also collect data provided by users themselves in open fields on the Website or through interaction with the QR codes.
5. How We Collect Data
- When you start a WhatsApp chat with NamiBlu Beach, we receive your phone number and the history of previous conversations with us.
- When you place an order, we receive the order details, your location, and payment information.
- We collect data through unique QR codes which, when scanned, allow us to identify the partner hotel or venue where the scan took place.
- When you browse our website, we collect cookies and usage data.
- When you accept marketing or promotional communications, we collect your email address.
6. How We Use and Share Your Information
We use the information to provide you with a personalized experience, which may include showing advertisements, as well as for other purposes already specified above.
Within the operation of our food and beverage delivery platform, we may share your personal information with third parties only in the following cases:
- Partner Restaurants and Stores: We share the necessary information with the establishments where you place your orders so they can prepare and deliver them properly.
- Delivery Personnel: We provide the delivery personnel with the essential data to complete the delivery.
- Service Providers: We may share your information with third parties that provide services to us, such as payment processing, customer service, data hosting, analytics, or marketing services. These providers act on our behalf and are subject to strict confidentiality and limited use commitments.
Currently, we work with the following third parties for the processing of personal data, always under data processing agreements according to Article 28 of the GDPR:
- Stripe: For payment processing and billing with customers, suppliers, and hotel affiliates.
- Zoho CRM: For managing segmented customer records and marketing communications (email/SMS).
- Zapier: For automated and secure workflows that allow moving data between tools.
We reserve the right to incorporate new data processors in the future, always ensuring they meet GDPR requirements and sign the corresponding data processing agreements. In case of significant changes, users will be duly informed through the usual channels.
- Legal Compliance: We may disclose your information when required by applicable law, a court order, or a competent authority, or when necessary to protect our legal rights or those of our users.
- Mergers or Acquisitions: In case our company participates in a merger, acquisition, or asset sale, your information may be transferred as part of the process, always ensuring its protection.
In any other cases not previously mentioned, we will request your explicit consent before sharing your information.
Some of our providers (such as Google or Meta) may be located outside the European Economic Area. In these cases, we ensure they comply with adequate measures, such as standard contractual clauses approved by the European Commission.
7. Data Transfer to Third Parties
Your personal data will never be sold to third parties without your prior, informed, and specific consent. However, in the event that data is transferred in the context of a merger, acquisition, corporate restructuring, or asset sale — including the transfer of the user database as part of such operation — it may be shared with the acquiring entity, its legal advisors, or regulatory authorities, always in compliance with the GDPR and the LOPDGDD.
When it is possible to identify the specific third parties, they will be communicated in advance before the transfer takes place. In such case, it will be ensured that:
- The assignee commits to using the data only for the same purposes for which it was originally collected.
- Users will be offered the possibility to exercise their rights of access, rectification, deletion, objection, restriction of processing, and data portability.
- The rights recognized by the GDPR and the LOPDGDD will be respected at all times.
- A clear notification will be provided regarding the change of data controller and, where applicable, the new applicable conditions.
Additionally, any other data transfer to third parties will be done only with your prior consent or in compliance with a legal obligation.
8. User Rights
In accordance with the General Data Protection Regulation, the user has the following rights regarding the processing of their data:
- Access their data
- Modify their data
- Delete their data
- Withdraw consent at any time
- Object to processing
- File a complaint with the Spanish Data Protection Agency (AEPD)
To exercise your rights or if you believe that NamiBlu Beach is violating data protection regulations, please send us an email at privacidad@namiblubeach.com.
If you prefer to manage your data via WhatsApp, write:
- “DATA” to initiate the data request process
- “DELETE” to initiate the data deletion process
- “STOP” to stop receiving marketing communications
- “PRIVACY” to get the link to our Privacy Policy
9. Retention Period
Your data will be retained:
- As long as there is a contractual relationship and for the time necessary to comply with legal obligations, respond to requests made, fulfill the purposes for which they were collected, and during the statute of limitations for any legal actions that may arise from it.
- Data for commercial purposes will be retained until you revoke your consent.
- Browsing data is stored as specified in the Cookie Policy.
Nonetheless, the user may request to unsubscribe, object to, or revoke their consent by sending the message “DELETE” in the NamiBlu Beach WhatsApp chat.
10. Necessity of Data
The data requested on the Website or via WhatsApp is mandatory to fulfill the purposes of the service, unless otherwise specified in the required field. Therefore, if the mandatory data is not provided or is incorrect, those purposes cannot be fulfilled.
The processing of mandatory data for the purchase of products through the Website or via WhatsApp is necessary for the execution of the contract between the user and NamiBlu Beach.
The processing of your data for promotional purposes will be based on the user’s consent collected under the current applicable regulations. Likewise, if you withdraw your consent for any of the processing activities, this will not affect the lawfulness of the processing carried out prior to the withdrawal.
11. Necessity of Data
The data requested on the Website or via WhatsApp is mandatory to fulfill the purposes of the service, unless otherwise specified in the required field. Therefore, if the mandatory data is not provided or is incorrect, those purposes cannot be fulfilled.
The processing of mandatory data for the purchase of products through the Website or via WhatsApp is necessary for the execution of the contract between the user and NamiBlu Beach.
The processing of your data for promotional purposes will be based on the user’s consent collected under current applicable regulations. Likewise, if you withdraw your consent for any of the processing activities, this will not affect the lawfulness of the processing carried out prior to the withdrawal.
12. Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy. We will notify you of any significant changes through our usual channels (website, WhatsApp, etc.).