Privacy Policy — Villa Amara

1. Who We Are

Villa Amara(“we”, “us”, “our”) operates this website and manages the accommodation booking process. For any privacy-related queries, contact us at .

2. What Information We Collect

We collect information you provide directly to us when making a booking:

Full name and email address
Phone number (optional)
Number of guests and special requests
Payment information (processed securely by Stripe — we never store card details)

We also automatically collect certain technical information when you visit our website:

IP address and browser type
Pages visited and time spent (analytics, only with your consent)
Referring website

3. How We Use Your Information

To process and manage your reservation
To send booking confirmations, payment links, and pre-arrival information
To communicate with you about your stay
To improve our website and services
To comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract performance — to fulfil your booking and communicate about your stay.
Legitimate interests — to improve our services and protect our business.
Consent — for analytics cookies (you can withdraw consent at any time).
Legal obligation — where we are required to retain data by law.

5. Third-Party Services

We share data with trusted third parties only as necessary:

Stripe — payment processing. Your card details are handled directly by Stripe and are never stored on our servers. See Stripe's Privacy Policy.
Google Analytics — anonymous website usage statistics (only if you grant cookie consent). Data is anonymised and does not identify you personally. See Google's Privacy Policy.
Resend — transactional email delivery for booking confirmations and notifications.

6. Cookies

We use cookies to remember your cookie consent preference. If you accept analytics cookies, Google Analytics will set additional cookies to track anonymous usage statistics.

You can change your cookie preference at any time by clearing your browser's local storage or by declining consent on your next visit.

7. Data Retention

We retain booking data for up to 3 years from the date of your stay to comply with financial and legal obligations. Analytics data (if consented) is retained for 14 months per Google Analytics default settings.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access the data we hold about you
Right to correction of inaccurate data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to withdraw consent (for analytics)

To exercise any of these rights, please contact us at . We will respond within 30 days.

9. Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at .