Privacy Policy

Habibi Del Mar ("we," "us," or "our") operates the website habibidelmar.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

1. Information We Collect

Information You Provide

When you voluntarily subscribe to our mailing list or submit a booking inquiry, we may collect:

• Your name
• Email address
• Any additional information you include in booking inquiries (event type, dates, message)

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar tracking technologies:

• Device & Browser Info: Device type (mobile/desktop/tablet), browser type, operating system
• Usage Data: Pages visited, links clicked, time spent on pages, referring website
• Location Data: General geographic location based on IP address (country/city level only)
• Campaign Data: UTM parameters and referral source when you arrive from marketing campaigns or social media

2. How We Use Your Information

We use the collected information for the following purposes:

• To send you email updates about events, music releases, and news (only if you subscribe)
• To respond to booking inquiries
• To understand how visitors interact with our website and improve user experience
• To measure the effectiveness of our marketing and social media campaigns
• To analyze website traffic and usage patterns

3. Cookies & Tracking Technologies

Our website uses both first-party cookies (set by us) and third-party cookies (set by our analytics and advertising partners). Below is a complete list of all cookies and local storage used on this site.

First-Party Cookies

We set the following cookies on the domain habibidelmar.com to provide a consistent experience, remember your preferences, and understand how visitors find us. All first-party cookies have a duration of 2 years (730 days) unless otherwise noted.

• hdm_uid — A unique anonymous visitor identifier (UUID). Used to link your browsing sessions together so we can understand the full visitor journey. Does not contain any personal information.
• hdm_ft_source, hdm_ft_medium, hdm_ft_campaign, hdm_ft_term, hdm_ft_content — First-touch attribution cookies. Store the UTM campaign parameters from the very first marketing link that brought you to our site. Only set once and never overwritten.
• hdm_lt_source, hdm_lt_medium, hdm_lt_campaign, hdm_lt_term, hdm_lt_content — Last-touch attribution cookies. Store the UTM campaign parameters from your most recent marketing link click. Updated each time you arrive via a new campaign link.
• hdm_fbclid — Stores the Facebook Click ID (fbclid) when you arrive from a Meta (Facebook/Instagram) ad. Used to measure advertising effectiveness.
• hdm_fbc — A formatted version of the Facebook Click ID used for server-side conversion reporting to Meta.
• hdm_gclid — Stores the Google Click ID (gclid) when you arrive from a Google ad. Used to measure advertising effectiveness.
• hdm_ft_landing — Records the URL of the first page you visited on our site. Used for attribution analysis.
• hdm_ft_timestamp — Records the date and time of your first visit. Used for attribution analysis.
• hdm_cookie_consent — Stores your cookie consent preference (accepted or declined). Duration: 1 year.

Local Storage

In addition to cookies, we use your browser's local storage (which does not expire automatically) to store:

• hdm_uid — A backup copy of your anonymous visitor ID, ensuring continuity if cookies are cleared.
• hdm_session — Session-level data including page views, referrer, and device type. Cleared when you close your browser.
• hdm_cookie_consent — A backup copy of your consent preference.

Google Analytics 4 (GA4)

We use Google Analytics to understand website traffic and user behavior. Google Analytics sets its own cookies (such as _ga and _ga_*, duration: 2 years) to collect data such as pages visited, session duration, and general location. When you submit a form, we may send hashed contact information to Google for Enhanced Conversions measurement. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Meta Pixel (Facebook)

We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel sets its own cookie (_fbp, duration: 90 days) and tracks page views and link clicks. When you submit a form, we may send hashed contact information to Meta for Advanced Matching to improve ad measurement. You can manage your ad preferences in your Facebook Ad Settings.

Server-Side Event Tracking

In addition to browser-based tracking, we send certain events (such as form submissions and link clicks) directly from our server to Meta via the Conversions API (CAPI). This ensures accurate measurement even when browser-based tracking is limited by ad blockers or privacy settings. Server-side events include your anonymous visitor ID and, when you submit a form, hashed contact information. Event deduplication ensures that events are not double-counted between browser and server.

How to Manage Cookies

When you first visit our site, a cookie consent banner allows you to accept or decline non-essential cookies. If you decline, all hdm_* cookies and local storage entries are immediately removed, and no tracking cookies will be set during your visit. You can also manage cookies at any time through your browser settings. Note that disabling cookies may affect your browsing experience.

---

4. Third-Party Services

We share your information with the following third-party service providers who assist us in operating our website:

• Brevo (formerly Sendinblue): Email marketing platform — stores your name, email, and attribution data when you subscribe to our mailing list or submit a booking inquiry
• Google Sheets / Google Apps Script: Used to log form submissions, link clicks, and visitor data for our internal analytics and CRM. Also serves as our server-side relay for the Meta Conversions API.
• Google Analytics: Website traffic analysis and Enhanced Conversions (hashed contact data sent on form submissions)
• Meta (Facebook): Advertising measurement via browser Pixel and server-side Conversions API. Receives hashed contact data via Advanced Matching on form submissions.

Each of these services has its own privacy policy governing how they handle your data. Personal data shared with Meta and Google for conversion measurement is always transmitted in hashed (SHA-256) form and cannot be reversed to reveal the original information.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy. Specifically:

• Email subscriber data is retained until you unsubscribe
• Analytics data is retained according to the default retention periods of Google Analytics and Meta
• Booking inquiry data is retained for up to 12 months
• First-party cookies (hdm_*) expire after 2 years, or immediately upon declining cookies via our consent banner
• Visitor identity data in our internal database is retained for up to 2 years from last activity

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in each email
• Cookie Control: Manage or disable cookies through your browser settings or our cookie consent banner

To exercise any of these rights, contact us at bookings@habibidelmar.com.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell your personal information to third parties.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own (including the United States), where our third-party service providers operate. We ensure appropriate safeguards are in place for such transfers.

9. Children's Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

bookings@habibidelmar.com