Privacy Policy
What we collect, why, and what we do not collect.
Privacy at Tenerife Live
Tenerife Live is an editorial guide to live music on the Canary Islands. We do not run user accounts, we do not sell anything directly, and we keep the personal data we touch to the minimum needed to answer your messages, send the optional newsletter, and aggregate anonymous click counts for the operator.
What we collect
Contact form (/contact)
When you send us a message we receive the name, email address and message body you choose to provide. We use this only to reply to you and to keep an operational record of the conversation. Messages are delivered by email via Resend.
Newsletter sign-up
If you subscribe to the newsletter we store your email address in our admin mailbox for the purpose of sending you occasional updates. Every newsletter contains an unsubscribe link.
Affiliate click logs (server-side)
When you click an outbound ticket or tour button it goes through /api/out/<provider> before redirecting to the partner. The server records the provider, content identifier, campaign label and source surface (e.g. event-detail). It does NOT log your IP address, User-Agent, or any other identifying request header. Records expire automatically after 30 days. The partner site you land on has its own privacy policy.
Optional analytics (only with your consent)
If — and only if — you click Accept optional on the cookie banner we load Google Analytics 4 (with IP anonymisation and ad-data redaction forced on) plus Vercel Analytics and Vercel Speed Insights. See the cookies policy for the exact list and durations.
What we do NOT collect
- We do not run advertising, marketing or retargeting trackers.
- We do not operate user accounts, passwords or login sessions for visitors.
- We do not collect payment information — ticket purchases happen on partner sites.
- We do not build behavioural profiles or share data with brokers.
- We do not log IP addresses or User-Agents on the affiliate redirect.
- We do not use heatmaps, session-replay tools, or fingerprinting.
How long we keep data
- Contact emails: kept in our admin mailbox for as long as needed to handle the conversation, then archived or deleted.
- Newsletter list: kept until you unsubscribe.
- Affiliate click logs: 30-day TTL — automatically deleted by the database.
- Analytics data: retained by Google / Vercel under their own retention policies (we set GA retention to the minimum supported).
- Your cookie choice (tm.cookie-consent.v1): 12 months, then we re-prompt.
Third parties that may see your data
- Resend — transactional email delivery for contact-form replies and admin notifications.
- Vercel — hosting infrastructure; receives standard request logs (IP, URL) as part of serving the page. With your consent also receives Vercel Analytics / Speed Insights data.
- Google — only if you opt in to analytics; receives standard GA4 telemetry with IP anonymisation.
- Mapbox — when you open a page with a map; serves tiles and may set its own browser storage. We do not send your personal data to Mapbox.
- Ticket and tour partners (Ticketmaster, GetYourGuide, Tiqets, Klook) — only after you click an outbound link, and only from then on per their own policies.
Your rights (UK GDPR / EU GDPR)
You can ask us to:
- Tell you what personal data we hold about you.
- Correct inaccurate data.
- Delete the data we hold (subject to legal retention obligations).
- Withdraw consent (for analytics, via the Cookie settings link in the footer; for the newsletter, via the unsubscribe link in every email).
- Object to processing or request portability.
Email privacy@tenerife.music for any of the above. You also have the right to lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office).
Contact
Last updated: 2026-05-16
This page describes current runtime behaviour. We update it when the runtime changes (for example, if we introduce a new third-party service or a new data-retention policy).