Legal
Privacy policy
What data we collect when you contact us, what we use it for and how to exercise your rights.
Last updated: October 2026
Data controller
José Ruiz Hernández (Malibú Garden), Tax ID (NIF) 48504257V, Avda. de Torre Alcayna, 11, 30110 Churra (Murcia), Spain. Email: info@malibugarden.es.
What data we collect
When you ask us for information or a quote (contact form, “My cart” or the “Design your space” assistant): your name, email address and, if you provide them, your phone number, country, type of customer, timeframe, your message and the pieces you are interested in. We also record the page you are writing from, the language and the approximate country of your connection, as reported by the server.
For the assistant, we only count how many times it is opened and completed, without storing any personal data.
Why we use it and on what legal basis
To answer your enquiry, prepare a quote for you and follow it up. The legal basis is your consent, which you give when you submit the form, and taking steps at your request prior to entering into a contract. We do not use your data to send you marketing unless you ask us to, and we do not make automated decisions.
How long we keep it
For as long as the business relationship lasts and, after that, for the time needed to deal with any potential legal liabilities. If no order is placed, we delete the request no later than two years after our last contact, or sooner if you ask us to.
Who else may see it
We do not share your data with third parties unless required by law. It is processed on our behalf, with the safeguards required by the GDPR, by this website’s hosting provider and our email provider. If you contact us via WhatsApp, that conversation is also subject to WhatsApp’s privacy policy.
Your rights
You may request access to your data, its rectification or erasure, restriction of or objection to its processing and its portability, and you may withdraw your consent at any time, by emailing info@malibugarden.es. If you believe we have not handled your data properly, you may lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority (aepd.es).
Security
The website runs over an encrypted connection (HTTPS) and requests are stored in an area of the server that cannot be accessed from the internet and that only our team can access.