Privacy Policy

Last updated: August 2026

At Mola Mola Tours (referred to as "we", "us", or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.molamolatours.com (the "Site") and use our booking services. Please read this policy carefully. If you do not agree with the terms, please do not use our Site or services.

1. Who We Are

  Mola Mola Tours is a tour operator based in Lanzarote, Spain.

  Our registered address is: , Lanzarote, Spain

  Contact email: office@molamolatours.com

  We are the data controller for the personal data collected through this website.

2. Information We Collect

We collect various types of information in connection with the services we provide, including:

a. Personal Data You Provide Directly

 
• Booking information: name, email address, phone number, guest details (age categories, special requirements), payment information (processed securely by SumUp).

 
• Account information: if you create an account, your username, password, and preferences.

 
• Communications: any messages you send to us via email, contact forms, or chat.

 
• Reviews: when you submit a review, we collect your name, email, rating, and review text (published after approval).

b. Information Collected Automatically

 
• Usage data: IP address, browser type, operating system, referring URLs, pages visited, time and date of visit, and other analytics data.

 
• Cookies: we use cookies and similar tracking technologies to enhance your experience, analyse site traffic, and serve targeted ads. For more details, see our Cookie Policy section below.

c. Information from Third Parties

 
• SumUp: payment processing is handled by SumUp; we do not store your full payment card details.

 
• Google Analytics: we use Google Analytics to understand site usage; data is anonymised where possible.

3. How We Use Your Information

We use your personal data for the following purposes:

 
• Payment processing: facilitating payments via SumUp and handling refunds or deposits.

 
• Customer support: responding to enquiries, complaints, and feedback.

 
• Marketing: with your consent, we may send you promotional emails about new tours, special offers, or updates. You can opt out at any time.

 
• Analytics and improvement: analysing site traffic and user behaviour to enhance our website and services.

 
• Legal compliance: complying with applicable laws, regulations, and legal requests.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

 
• Performance of a contract: processing is necessary to fulfil your booking requests and provide our services.

 
• Legitimate interests: improving our website, marketing our services (subject to your rights), and preventing fraud.

 
• Consent: for marketing communications, cookies (non?essential), and optional data collection.

 
• Legal obligation: where required by law (e.g., tax records, court orders).

5. Sharing Your Information

We do not sell or rent your personal data. We share your information only with:

 
• SumUp Payments – our payment gateway, to process transactions securely.

 
• Service providers – hosting, email delivery, analytics (Google Analytics), and other third?party tools that assist us in operating the website.

 
• Legal authorities – if required by law or to protect our rights.

All third?party providers are contractually obligated to keep your data confidential and use it only for the purposes we specify.

6. International Data Transfers

Our service providers (Checkfront, SumUp, Google) may process data in countries outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law (e.g., tax and accounting records for up to 7 years). After that, we securely delete or anonymise your data.

8. Your Data Protection Rights

Under the GDPR, you have the following rights:

 
• Access: request a copy of the data we hold about you.

 
• Rectification: correct any inaccurate or incomplete data.

 
• Erasure: request deletion of your data (subject to legal obligations).

 
• Restriction: limit how we use your data.

 
• Data portability: receive your data in a structured, commonly used format.

 
• Objection: object to processing based on legitimate interests or direct marketing.

 
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at office@molamolatours.com. We will respond within one month. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you feel we have not handled your data properly.

9. Cookies and Tracking Technologies

We use cookies to:

 
• Essential: enable core functionality (e.g., session management, CSRF protection).

 
• Analytical: track site usage via Google Analytics (anonymised IP).

 
• Marketing: serve relevant ads (if you have consented).

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect site functionality.

For more information, please see our Cookie Policy (if you have one) or contact us.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. This includes:

 
• SSL encryption (HTTPS) for all data transmission.

 
• Secure servers and firewalls.

 
• Access controls and regular security audits.

 
• Staff training on data protection.

11. Third Party Links

Our website may contain links to third?party sites (e.g., social media, payment providers). We are not responsible for their privacy practices. Please review their policies before providing any personal data.

12. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated date. We encourage you to review it periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

This policy was last updated on August 2026.