top of page

Privacy Policy

Last updated: 17 October 2026

At NobleRoute we design premium road trips. When you send us a journey request, you trust us with your personal details. This policy explains, in plain words, what we collect, why, for how long, who else may see it, and what your rights are.

​

1. Who is responsible for your data

  • Data controller: Enrique Alejandro Charro Herrera, trading as NobleRoute

  • Tax ID (NIF): 51121584J

  • Address: Calle Peña Unzue 34, 28791 Soto del Real, Madrid, Spain

  • Email: noblerouteftf@gmail.com

  • Phone: +34 637 29 76 21

​

2. What data we collect

When you fill in one of our request forms:

  • Your name, email and, if you choose to give it, your phone number.

  • If you are a travel agency: the agency name, the contact person and a reference for your client (never the client's real name).

  • Your travel preferences: number of travellers, region, arrival airport, travel dates and interests.

  • Your acceptance of this policy.

When you browse our website: our hosting provider, Wix, uses technical cookies that the site needs to work, and basic visit statistics.

We do not ask for health data, such as allergies or mobility needs, through the website. If any of this matters for your journey, we will discuss it with you directly and only with your explicit consent.

​

3. Why we use your data and on what legal basis

  • To answer your request and prepare a personalised journey proposal. Legal basis: steps taken at your request before entering into a contract (GDPR, Art. 6.1.b).

  • To contact you about your request by email or phone. Legal basis: steps taken at your request before entering into a contract (Art. 6.1.b).

  • If you book: to organise and manage your journey. Legal basis: performance of a contract (Art. 6.1.b).

  • To meet our accounting and tax obligations. Legal basis: legal obligation (Art. 6.1.c).

  • To send you news and inspiration, only if you ask for it. Legal basis: your consent (Art. 6.1.a), which you can withdraw at any time.

To prepare proposals faster, we use an AI assistant to research routes and draft the proposal. A person at NobleRoute always reviews it before it reaches you. We do not sell your data, and we do not take automated decisions that have legal effects on you.

​

4. How long we keep it

  • Requests that do not become a booking: up to 12 months from your last contact with us. After that, we delete them.

  • Bookings: for as long as the contract lasts, and afterwards for the periods required by Spanish tax and commercial law.

  • Newsletter: until you unsubscribe.

​

5. Who else may see your data

We work with a small number of trusted providers. They process data only on our behalf and under contract:

  • Wix.com Ltd. Website hosting, forms and contact management. Israel, which the European Commission considers to offer adequate protection. Some Wix sub-processors are in other countries, under safeguards approved by the European Commission.

  • Microsoft (Outlook). Email, where we receive your request. EU / USA, under the EU–US Data Privacy Framework or Standard Contractual Clauses.

  • Google (Gmail, Google Drive). Email and document storage. EU / USA, under the EU–US Data Privacy Framework or Standard Contractual Clauses.

  • Anthropic, PBC. AI assistant that helps us prepare your proposal. USA, under the European Commission's Standard Contractual Clauses.

If you book a journey, we will share only the data strictly needed with the suppliers who deliver it: hotels, car rental companies, restaurants and experience providers. We will tell you who they are in your proposal.

​

6. Your rights

You can, at any time and free of charge:

  • Access your data.

  • Correct it if it is wrong.

  • Delete it.

  • Object to or restrict how we use it.

  • Receive it in a portable format.

  • Withdraw your consent, without affecting anything we did before.

Email noblerouteftf@gmail.com with the subject "Data protection" and tell us which right you want to use. We will reply within one month.

If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos), www.aepd.es.

​

7. Minors

Our services are for adults. We do not knowingly collect data from anyone under 18.

​

8. Security

We use providers with recognised security standards and limit access to your data to the people who need it to prepare your journey.

​

9. Changes to this policy

If we change this policy, we will publish the new version on this page and update the date at the top.

bottom of page