Privacy Policy

Last Updated: 19 August 2026

At TukTuk Tour Madrid, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, when it may be shared, and the rights you have in relation to your personal data.

This Privacy Policy applies to visitors, customers and other individuals who interact with tuktuktourmadrid.com, including people who contact us, request information, communicate with us through WhatsApp or telephone, or book a tuk tuk tour in Madrid.

Who Is Responsible for Your Personal Data?

TukTuk Tour Madrid is responsible for the personal information collected through this website and used to provide our tourism and customer-support services.

If additional legal identification details are required under applicable Spanish law, such as the registered legal name, tax identification number or registered office, those details should be provided in the website's legal notice or other applicable legal information.

Information We Collect

We collect information that you provide directly to us and certain technical information generated when you use our website. Depending on how you interact with TukTuk Tour Madrid, this may include:

• Your name and surname.
• Email address.
• Telephone or WhatsApp number.
• Booking date and preferred tour time.
• Number of passengers or group size.
• Meeting-point or pickup information required to provide the tour.
• Information contained in your messages, enquiries or booking requests.
• Payment or transaction information where necessary to process a booking.
• Technical information such as IP address, browser type, device type, operating system and language.
• Information about how you use our website, such as pages visited and interactions with website features.
• Cookie and similar technology information, subject to your cookie preferences and applicable law.

How We Use Your Information

We use personal information only for legitimate business, contractual, legal or consent-based purposes. This may include:

• Responding to questions, enquiries and requests.
• Processing and managing tour bookings.
• Confirming your booking and providing important tour information.
• Contacting you about meeting points, pickup arrangements, schedules, changes or cancellations.
• Providing customer service before, during or after your tour.
• Communicating with you through email, telephone or WhatsApp when necessary for your enquiry or booking.
• Processing payments through the relevant payment or booking provider.
• Operating, maintaining and improving our website and booking experience.
• Understanding website usage and performance where analytics processing is legally permitted.
• Protecting our website and services against fraud, abuse, security threats and unlawful activity.
• Complying with applicable legal, tax, accounting and regulatory requirements.
• Sending promotional communications where we have an appropriate legal basis to do so.

Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) and applicable Spanish data-protection law apply, we process personal information on an appropriate legal basis. Depending on the circumstances, the legal basis may be:

• Contract: processing necessary to arrange, manage or provide a tour or service that you have requested.
• Legal obligation: processing necessary to comply with applicable legal, tax, accounting or regulatory requirements.
• Legitimate interests: processing necessary for purposes such as website security, fraud prevention, business administration, customer service and improving our services, where those interests are not overridden by your rights.
• Consent: processing based on your consent, including where applicable certain marketing communications and non-essential cookies or similar technologies.

Bookings and Payments

When you book a Madrid tuk tuk tour, we process the information necessary to arrange and provide the service. This may include your name, contact details, booking date, tour time, number of passengers and meeting or pickup information.

Where payment is processed through a third-party payment or booking provider, that provider may process payment information directly. We do not intentionally store complete payment-card numbers or card security codes on our website unless our payment system specifically requires such processing and it is permitted by applicable law.

Third-party booking and payment providers may have their own privacy policies and terms. We recommend reviewing those policies when using their services.

Telephone, WhatsApp and Email Communications

You can contact TukTuk Tour Madrid by telephone, WhatsApp or email. When you contact us, we may process the information you provide so that we can respond to your enquiry, arrange your booking, answer questions or provide customer support.

If you use WhatsApp or another third-party communication service, that service may process your information independently under its own privacy policy and terms.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide essential functionality, remember preferences, improve website performance and understand how visitors interact with our website.

Some cookies may be necessary for the website to operate. Other cookies, including certain analytics, advertising or tracking technologies, may require your consent under applicable law.

Where cookie consent is required, you can manage your preferences through the cookie controls provided on the website. You may also manage cookies through your browser settings. Restricting certain cookies may affect some website functionality.

Analytics and Third-Party Tools

We may use third-party services to help us understand website traffic, measure performance, identify technical problems and improve our website and services.

Depending on the services actually used on the website, these providers may process information such as IP address, device information, browser information, pages viewed, approximate location and interactions with the website.

Where applicable law requires consent before analytics or similar technologies are used, those technologies should only be activated after the required consent has been provided.

Data Sharing and Disclosure

We do not sell or rent your personal information.

We may share personal information with trusted service providers when necessary to operate our website and provide our services. Depending on the services we use, these providers may include website hosting companies, booking or reservation systems, payment providers, email services, communication providers, technical service providers and professional advisers.

We may also disclose information where required by law, legal proceedings or a competent authority, or where necessary to protect our customers, website, legal rights or business operations.

International Data Transfers

Some service providers may process personal information outside Spain or the European Economic Area. Where applicable data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required by applicable law.

Booking, accounting, tax and transaction information may be retained for the periods required by applicable legal obligations. Enquiry and customer-service information may be retained for as long as reasonably necessary to respond to the request and manage any related matter.

When personal information is no longer required, we will delete it or anonymise it where reasonably practicable, subject to applicable legal retention requirements.

Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, loss, misuse or disclosure.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure. For this reason, we cannot guarantee absolute security of information transmitted online.

Your Privacy Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information where there is no lawful reason for us to retain it.
• Request restriction of processing in circumstances provided by law.
• Object to certain processing, including processing based on legitimate interests.
• Withdraw consent where processing is based on your consent.
• Request data portability where the applicable legal requirements are met.

To exercise your rights, contact us at madridontuktour@gmail.com. We may request reasonable information to verify your identity before processing a privacy request.

Marketing Communications

We may send information about our tours, services or offers where we have an appropriate legal basis to do so. Where consent is required, we will obtain your consent before sending marketing communications.

You can stop receiving marketing communications at any time by using the unsubscribe option provided in the message or by contacting us directly.

Children's Privacy

Our website and tourism services are intended for a general audience. We do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can review the information and take appropriate action.

Third-Party Websites and Services

Our website may contain links to third-party websites, booking platforms, maps, social-media services or other external services. We are not responsible for the privacy practices, security or content of third-party websites.

When you visit or use a third-party service, that provider may collect and process information under its own privacy policy and terms.

Your Right to Complain

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and try to resolve the issue.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, data-processing practices or applicable legal requirements change.

When changes are made, the updated version will be published on this page with a revised “Last Updated” date. We recommend reviewing this page periodically.

Privacy Contact