Privacy policy

• When you book: your name, email, phone number, check-in/out dates, and apartment selection.
• When you message us: the content of your message and the contact details you provide.
• When you pay: your payment is handled by Stripe. We never see or store your card number — only a payment reference.
• Automatically: basic web analytics (pages visited, country, device type) — no personal identifiers.

• Confirm your booking and send check-in instructions.
• Reply to your questions.
• Send a one-time confirmation email and a 24-hour check-in reminder.
• Comply with Gibraltar law (e.g. guest registration if requested by authorities).

We don't send marketing emails. We don't share your data with Airbnb, Booking.com, or any other third party — except the strict minimum we need to send you an email (Resend) or take payment (Stripe).

Booking data is stored on Supabase (EU servers). Email delivery is via Resend. Payment processing is via Stripe. All three providers are GDPR-compliant.

Booking records are kept for 7 years (accounting requirement). Contact-form messages are kept for 1 year, then deleted. Web analytics are aggregate only and not tied to individuals.

Under UK and EU data protection law, you can ask us to:

• See a copy of the data we hold on you.
• Correct anything that's wrong.
• Delete your data (subject to the accounting retention requirement above).
• Stop sending you booking-related emails.

Email rockrentalsgib@gmail.com with any of these requests and we'll respond within 30 days.

This site uses only essential cookies — for things like keeping the admin signed in. No tracking or advertising cookies. No cookie banner needed because there's nothing to consent to.

Questions or concerns about your data:

Judith Murciano · rockrentalsgib@gmail.com · +34 673 684 297