Privacy Policy

1. Introduction

At Bags&Go (DELIVERY WAREHOUSE, SL), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (bagsandgo.com) and our luggage storage and transfer services.

This policy complies with the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679, the Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD), and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

2.1 Data Protection Officer

For any privacy-related inquiries or to exercise your data protection rights, you can contact our Data Protection team at: privacy@bagsandgo.com

3. Data We Collect

3.1 Information You Provide

When you make a booking or contact us, we collect:

• Full name and contact details (email, phone number)
• Billing and delivery addresses
• Travel information (flight numbers, cruise details, hotel names)
• Luggage details (number of pieces, descriptions)
• Payment information (processed securely by payment providers)
• Communication preferences
• Any additional information you provide in messages or forms

3.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation patterns
• Referral source (how you found our website)
• Language preferences

3.3 Sensitive Data

We do not intentionally collect sensitive personal data (such as health information, religious beliefs, or political opinions). If you include such information in communications with us, we will treat it with the highest level of protection.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

5. How We Use Your Data

5.1 Service Delivery

• Process and manage your luggage storage and transfer bookings
• Coordinate pickup and delivery logistics
• Send booking confirmations and service updates
• Process payments and refunds
• Provide customer support

5.2 Communication

• Send transactional emails (confirmations, reminders, updates)
• Respond to inquiries and support requests
• Send promotional offers (only with your consent)
• Request feedback and reviews

5.3 Improvement and Analytics

• Analyze website usage to improve user experience
• Understand booking patterns and customer preferences
• Optimize our marketing efforts
• Develop new services and features

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyze site usage. Below is a detailed breakdown of the cookies we use:

6.1 Managing Cookies

You can manage your cookie preferences through:

• Our cookie consent banner when you first visit the site
• Your browser settings (see your browser's help section)
• Google's opt-out browser add-on for Google Analytics

7. Analytics and Third-Party Services

7.1 Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects:

• Pages visited and time spent on each page
• Device and browser information
• Geographic location (country/city level)
• Traffic sources and referrals
• Conversion events (bookings completed)

Google Analytics data is processed by Google LLC in accordance with their Privacy Policy.

We have enabled IP anonymization to protect your privacy.

7.2 Google Tag Manager

We use Google Tag Manager to manage website tags and tracking scripts. GTM itself does not collect personal data but facilitates the deployment of other tracking tools.

7.3 Facebook Pixel

With your consent, we use Facebook Pixel to:

• Measure the effectiveness of our Facebook advertising
• Create custom audiences for targeted ads
• Track conversions from Facebook ads

Learn more about Facebook's data practices in their Privacy Policy.

7.4 Google Ads

We use Google Ads conversion tracking to measure the performance of our advertising campaigns. This helps us understand which ads lead to bookings.

7.5 Payment Processors

Payment processing is handled by trusted third-party providers who have their own privacy policies:

• Stripe - Privacy Policy
• PayPal - Privacy Policy

We do not store your full credit card details on our servers.

8. Data Sharing and Disclosure

8.1 Service Providers

We share data with trusted service providers who help us operate our business:

• Logistics partners (for luggage pickup and delivery)
• Payment processors (for secure transactions)
• Email service providers (for communications)
• Cloud hosting providers (for data storage)
• Customer support tools

8.2 Legal Requirements

We may disclose your data when required by law or to:

• Comply with legal obligations or court orders
• Respond to lawful requests from public authorities
• Protect our rights, property, or safety
• Investigate potential violations of our terms

8.3 What We Never Do

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

10. Your Rights Under GDPR

As a data subject, you have the following rights under the General Data Protection Regulation:

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you.

10.2 Right to Rectification

You can request that we correct any inaccurate or incomplete data.

10.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data when it's no longer necessary for the purposes it was collected, or when you withdraw consent.

10.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

10.5 Right to Data Portability

You can request your data in a structured, commonly used, machine-readable format.

10.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

10.8 Exercising Your Rights

To exercise any of these rights, please contact us at: privacy@bagsandgo.com

We will respond to your request within 30 days. You may be asked to verify your identity before we process your request.

10.9 Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

Agencia Española de Protección de Datos
C/ Jorge Juan, 6
28001 Madrid, Spain
www.aepd.es

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

11.1 Technical Measures

• SSL/TLS encryption for all data transmission
• Encrypted data storage
• 3D Secure payment verification
• Regular security updates and patches
• Firewall and intrusion detection systems

11.2 Organizational Measures

• Access controls and authentication
• Staff training on data protection
• Data processing agreements with service providers
• Regular security audits
• Incident response procedures

12. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequacy decisions
• Binding Corporate Rules where applicable

12.1 Third-Party Services

The following services may process data outside the EEA:

• Google (Analytics, Ads, Tag Manager) - USA (SCCs in place)
• Meta (Facebook Pixel) - USA (SCCs in place)
• Stripe - USA (SCCs in place)

13. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@bagsandgo.com and we will delete the information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For significant changes, we will notify you by email or a prominent notice on our website
• We encourage you to review this policy periodically

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For matters related to our services, please also review our Terms and Conditions.