Legal
Privacy policy
Last updated: 30 September 2026
This page explains, in plain language, what personal data we collect on blowlinewhales.com, what we use it for, who we share it with and how you can exercise your rights.
1. Who is responsible for your data
The controller of your data is Blowline (blowlinewhales.com). For any question about your data you can write to us at info@blowlinewhales.com.
2. What data we collect and why
Contact form. Name, email, profile type and your message. We use them only to reply to you.
Tell us about your trip form. Name, email, destination, travel month and year, number of travelers, how you would like to travel and, if you choose to share them, your budget and age range. We use them to reply to you, to recommend the operators and agencies that best fit your trip and, if you choose so, to form groups of travelers with similar destinations and dates. Budget and age are optional.
User account. Your email and your password, which is stored encrypted and which we cannot see. We use them to give you access to your account and to subscriber content.
With each submission we also store the website language and the page you wrote from, so we can reply in your language. We do not use your data to send you advertising and we do not sell it to anyone.
3. Why we are allowed to process it (legal basis)
- Replying to your enquiries and handling your trip request or your account: because you ask us to (Article 6.1(b) GDPR).
- Optional data (budget and age): your consent, when you choose to include them (Article 6.1(a) GDPR).
- Sharing your data with an agency or operator: your explicit consent, given by ticking the corresponding box in the form (Article 6.1(a) GDPR).
You can withdraw your consent at any time by writing to info@blowlinewhales.com, without affecting anything done before you withdrew it.
4. Who we share your data with
Agencies and operators. Only if you choose to travel with an agency or in a group, and tick the consent box, will we share your name, email and form details with the agency or operator we recommend, so that they can contact you. From that moment, that agency or operator is responsible for the data it receives. Blowline does not sell trips: you book directly with them.
Service providers. To run the website we work with the following providers, who process data only on our instructions:
- Hostinger (website hosting and email), with servers in the European Union.
- Supabase (database where form submissions and user accounts are stored).
- Resend (sending of automatic emails, such as account confirmation or the notice of each enquiry).
- Google (Gmail, where we receive and reply to enquiries).
Some of these providers may process data outside the European Economic Area, mainly in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework where the provider is certified, or on the standard contractual clauses approved by the European Commission.
5. How long we keep it
- Enquiries and trip requests: while we handle your request and, afterwards, for a maximum of two years from our last contact, unless you ask us to delete them sooner.
- User account: for as long as you keep it active. If you close it, we delete your data, except what the law requires us to keep.
6. Your rights
You can ask us to access your data, correct it, delete it, object to its use, restrict it or receive it in a format you can take to another service. Write to us at info@blowlinewhales.com stating which right you wish to exercise. We will reply within one month.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
The website always runs over an encrypted connection (HTTPS). Form data is stored in a database the website can only write to: nobody can read it from the website, only the Blowline team from the private panel.
8. Minors
Forms and accounts are intended for people aged 18 or over. If you are under 18, please do not send us your data.
9. Cookies
Information about cookies and storage in your browser is in our cookie policy.
10. Changes to this policy
If we change this policy, we will publish the new version here with its update date.