Last updated: 22 July 2026

At Cactus Coliving, we are committed to protecting your privacy and processing your personal data lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, contact us, make a booking, stay at one of our coliving locations, participate in our activities or otherwise interact with us.

This Policy has been prepared in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

1. Who is responsible for your personal data?

The data controller responsible for processing your personal data is:

Company: Cactus Coliving SL
Tax identification number: B67797167
Registered address: Avenida Lucio Díaz Flores Feo 20, 38639 San Miguel de Abona, Santa Cruz de Tenerife, Spain
Website: cactuscoliving.com
Email: info@cactuscoliving.com

For any questions concerning this Privacy Policy or the processing of your personal data, you may contact us at the email address above.

2. What personal data do we collect?

The information we collect depends on how you interact with us.

2.1 Booking and accommodation information

When you request information, make a booking or stay at one of our properties, we may collect:

• Full name.
• Email address.
• Telephone number.
• Postal and billing address.
• Date of birth.
• Nationality.
• Identity-card or passport details.
• Arrival and departure dates.
• Room and accommodation preferences.
• Information about accompanying persons.
• Emergency-contact information.
• Booking history.
• Communications relating to your booking or stay.

Identity documents may be collected directly by Cactus Coliving or through MangoBeds, our booking and property-management platform.

2.2 Payment and billing information

When you make a payment, we may process:

• Billing details.
• Payment status and transaction references.
• Amounts paid or outstanding.
• Invoicing information.
• Limited information concerning the payment method used.

Payments may be processed through Stripe and through the payment functions integrated into MangoBeds.

Cactus Coliving does not normally receive or store complete payment-card details. Full card data are handled by the authorised payment processor according to its own security and data-protection standards.

2.3 Information required by law

As an accommodation provider in Spain, we may be legally required to collect, retain and communicate certain identification and accommodation information to the competent authorities.

This may include:

• Full name.
• Identity-card or passport number.
• Nationality.
• Date of birth.
• Sex, where legally required.
• Address or place of residence.
• Signature.
• Arrival and departure information.
• Details relating to the booking and payment.

We collect and communicate this information only where required under applicable law.

2.4 Preferences and information about your stay

To manage your experience and provide requested services, we may process:

• Dietary preferences, allergies or food requirements.
• Accessibility requirements.
• Room preferences.
• Work schedules or coworking requirements.
• Participation in activities or events.
• Feedback, reviews, complaints or incident reports.
• Information about pets, where applicable.

Please avoid providing sensitive personal information unless it is necessary for a service you have specifically requested.

2.5 Website and technical information

When you visit our website, we may collect:

• IP address.
• Browser type and version.
• Device and operating-system information.
• Approximate location derived from your IP address.
• Pages visited.
• Date and time of visits.
• Referring website.
• Interactions with forms and links.
• Cookie and consent preferences.
• Analytics and advertising information, where you have consented.

Information collected through cookies and similar technologies, including analytics, advertising and your cookie-consent choices, is explained in our Cookie Policy.

2.6 Communications and marketing information

When you contact us or subscribe to our communications, we may collect:

• Your name and contact details.
• The content of your enquiry.
• Your communication preferences.
• Newsletter subscription status.
• Information about your interactions with our emails, where legally permitted.

3. How do we collect your personal data?

We may collect personal data when you:

• Visit cactuscoliving.com.
• Complete a contact, availability or booking form.
• Make a booking through MangoBeds.
• Contact us by email, WhatsApp, telephone or social media.
• Check in at one of our properties.
• Provide your identity document directly or through MangoBeds.
• Make a payment through Stripe or another available payment method.
• Participate in an activity, event, survey or promotion.
• Subscribe to our newsletter.
• Submit feedback, a review, a complaint or a request.
• Interact with cookies, analytics tools or advertising technologies.

We may also receive information from third parties involved in your booking, such as:

• Booking platforms.
• Travel agencies.
• Payment providers.
• A person booking on your behalf.
• Organisations arranging group stays or team offsites.
• Referral and commercial partners.

4. Why do we process your personal data?

4.1 Managing enquiries and booking requests

We use your information to:

• Respond to enquiries.
• Provide availability and pricing.
• Prepare quotations.
• Process and confirm reservations.
• Communicate with you before arrival.

Legal basis: taking steps at your request before entering into a contract and performing a contract.

4.2 Managing your accommodation and stay

We use your information to:

• Organise check-in and check-out.
• Allocate rooms.
• Provide accommodation and coworking services.
• Manage services, activities and operational communications.
• Respond to incidents, requests, complaints or disputes.
• Protect the safety of colivers, staff and properties.

Legal basis: performance of the accommodation contract and our legitimate interest in safely operating and protecting our business.

4.3 Processing payments and invoices

We process payment and billing information to:

• Collect deposits and outstanding balances.
• Process payments through Stripe or MangoBeds.
• Issue invoices.
• Process refunds.
• Manage unpaid amounts.
• Maintain accounting and financial records.

Legal basis: performance of a contract and compliance with tax, accounting and commercial obligations.

4.4 Complying with legal obligations

We may process and disclose information to:

• Comply with traveller-registration requirements.
• Fulfil tax and accounting obligations.
• Respond to lawful requests from public authorities.
• Prevent or report unlawful conduct.
• Establish, exercise or defend legal claims.

Legal basis: compliance with a legal obligation.

4.5 Improving our website and services

We may use website activity, aggregated usage data and feedback to:

• Understand how our website is used.
• Improve the booking process.
• Identify technical problems.
• Improve our accommodation and coworking services.
• Develop new services and locations.

Legal basis: our legitimate interest in improving our services or your consent where non-essential cookies and tracking technologies are involved.

4.6 Marketing and newsletters

Where you have provided consent, we may use your information to send:

• News about Cactus Coliving.
• Availability updates.
• Special offers.
• Information about new locations.
• Community stories and events.
• Relevant services and collaborations.

We may use Mailjet or a similar email-marketing platform to manage these communications.

Legal basis: your consent.

You can unsubscribe at any time using the link included in our emails or by contacting info@cactuscoliving.com.

4.7 Analytics and advertising

Where you have consented through our cookie banner, we may use:

• Google Analytics to measure website use.
• Google Ads to measure advertising campaigns and conversions.
• Meta Pixel to measure interactions and advertising performance.
• CookieScript to manage your cookie choices and store your preferences in your browser.

These tools may collect online identifiers, device information, website activity and advertising-interaction data.

Legal basis: your consent.

4.8 Website security and spam prevention

We use Google reCAPTCHA on our contact forms to protect our website against spam, fraud and automated submissions.

Google reCAPTCHA may process technical information, including IP address, browser and device information, and user interactions, to assess security risks.

Legal basis: Our legitimate interest in protecting our website and preventing fraudulent or automated activity (Article 6.1.f GDPR), subject to applicable data protection requirements.

For more information, please see Google's Privacy Policy and Terms of Service.

‍

5. Who may receive your personal data?

We do not sell your personal data.

Authorised providers may access personal information where necessary to provide services to us, including:

• MangoBeds, for booking and property management.
• Stripe, for payment processing.
• Website-hosting and web-development providers.
• Email and communications providers.
• Mailjet, where used for newsletters and marketing communications.
• Cloud-storage and IT providers.
• Google, in connection with Analytics, Ads and reCAPTCHA. Analytics and advertising activities are subject to your consent, while reCAPTCHA is used for website security and spam prevention.
• Meta, in connection with Meta Pixel and advertising measurement, subject to your consent.
• CookieScript, for cookie-consent management.
• Accountants, tax advisers, lawyers and professional consultants.
• Insurance providers and debt-recovery providers, where necessary.
• Operational, maintenance and security providers.

These providers act under their own legal responsibilities or as processors acting on our instructions, as applicable.

We may also disclose data to police, courts, tax authorities, traveller-registration authorities or other public bodies where required by law.

6. International data transfers

Some providers, including Google, Meta, Mailchimp and Stripe, may process data outside the European Economic Area.

Where international transfers take place, we rely on legally recognised safeguards, which may include:

• An adequacy decision issued by the European Commission.
• Standard Contractual Clauses approved by the European Commission.
• Additional contractual, technical or organisational safeguards.
• Another transfer mechanism permitted by the GDPR.

7. How long do we keep your data?

We retain personal information only for as long as necessary for the purpose for which it was collected and for the periods required under applicable law.

In particular:

• Enquiries are retained for the time necessary to respond and deal with any related responsibilities.
• Booking and accommodation records are kept throughout the contractual relationship and for the applicable limitation periods.
• Invoices and accounting and tax documentation are retained for the periods required under Spanish law.
• Traveller-registration information is retained for the legally required period.
• Marketing information is retained until you unsubscribe or withdraw consent.
• Complaints, unpaid balances, incidents and legal claims may be retained until the relevant responsibilities or legal actions have expired.
• CCTV recordings are retained only for the legally permitted period, unless they must be preserved for the investigation of an incident or made available to the competent authorities.

Once the applicable period has expired, the data will be deleted, anonymised or securely blocked where continued restricted retention is legally required.

The RGPD requires organisations to limit both the volume of data collected and how long it is retained.

8. Video surveillance

Some Cactus Coliving properties use video-surveillance systems for security purposes.

The cameras are intended to:

• Protect people, property and facilities.
• Prevent or investigate theft, damage or security incidents.
• Support the establishment, exercise or defence of legal claims where necessary.

Cameras are not installed inside bedrooms, bathrooms or other areas where there is a reasonable expectation of privacy.

The legal basis for this processing is our legitimate interest in protecting people and property.

Access to recordings is limited to authorised persons. Recordings may be disclosed to police, courts, insurers or other competent parties where necessary or legally required.

Signs informing individuals about the presence of video surveillance are displayed in monitored areas. More detailed information may be requested at info@cactuscoliving.com.

9. Cookies and similar technologies

Our website uses cookies and similar technologies. Strictly necessary cookies are used to ensure the proper functioning and security of our website. Analytics, marketing and other optional cookies are only activated with your consent, managed through CookieScript.

You can change or withdraw your consent at any time using the CookieScript settings button located at the bottom left of our website.

10. Your data-protection rights

You may exercise the following rights:

• Access.
• Rectification.
• Erasure.
• Restriction of processing.
• Objection.
• Data portability.
• Withdrawal of consent.
• The right not to be subject to certain solely automated decisions.

Requests should be sent to: info@cactuscoliving.com

Please explain which right you wish to exercise and provide enough information for us to locate the relevant data. We may request additional information where necessary to verify your identity.

Requests are generally free and must normally be answered within one month, although the period may be extended in complex cases.

For more information about the cookies we use, their purposes, providers and duration, please see our Cookie Policy.

11. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority if you believe that your personal data have been processed unlawfully.

In Spain, the competent authority is the:

Agencia Española de Protección de Datos — AEPD

You may also contact us first at info@cactuscoliving.com so that we can investigate your concern.

12. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, providers, data-processing activities or applicable legislation.

The current version will be published on this page together with its latest revision date.

13. Contact

Cactus Coliving SL
Avenida Lucio Díaz Flores Feo 20
38639 San Miguel de Abona
Santa Cruz de Tenerife, Spain

Tax identification number: B67797167
Email: info@cactuscoliving.com
Website: cactuscoliving.com