Privacy policy

This policy explains what personal information we collect when you use Zante Sunny Villas, why, and what your rights are.

Who we are

Zante Sunny Villas runs this website and takes bookings on behalf of the villa owners (the hosts). When you book or send a question, the host of that villa also receives your details so they can look after your stay. For anything about your data, contact us at hello@example.com.

What we collect

• When you book: your name, email address, phone number, the dates and number of guests, anything you write in your booking notes, and a record of when you agreed to the booking terms.
• When you pay: your payment is handled by Stripe. We see whether it succeeded and the last four digits of your card, never the full card number.
• When you send a message: your name, email address, optional phone number, the dates you asked about and your messages.
• Before you arrive: your arrival time and travel details, and for everyone staying their full name, date of birth and, for adults, nationality and passport or ID card number. Greek law requires holiday accommodation to record who is staying. Passport and ID numbers are stored encrypted, only your host can see them, and they are deleted 12 months after your stay.
• When you write a review: your review, scores and name. Only your first name and initial and the month you stayed are shown publicly.
• When you visit the site: our web server keeps standard logs (such as your IP address and browser type) to keep the site secure.

Why we use it

• To take and manage your booking, and to pass it to your host. (Lawful basis: to carry out the contract you ask for.)
• To answer your questions and pass them to the host. (Lawful basis: to take steps you ask for before a contract, or our legitimate interest in answering you.)
• To send you emails about your booking, and one invitation to review your stay afterwards. (Lawful basis: the contract, and our legitimate interest in collecting genuine reviews.)
• To keep accounting records and meet legal duties, such as Greek tax and guest registration rules. (Lawful basis: legal obligation.)
• To keep the website secure and prevent fraud. (Lawful basis: legitimate interest.)

We don't sell your information, and we don't send marketing emails.

Who we share it with

• The host of the villa you book or ask about.
• Stripe, which processes card payments.
• Our hosting and email providers, which run the website and send our emails on our behalf.
• Google, only if you choose to load the map on a villa page.
• Authorities, where the law requires it.

Some of these providers may process data outside the UK and EEA. When they do, they use approved safeguards such as standard contractual clauses.

How long we keep it

We keep booking and payment records for as long as tax and accounting law requires. We keep messages and reviews for as long as they are needed to deal with your booking or question, and reviews for as long as they are shown on the site. Server logs are deleted after a short period.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, ask us to limit how we use it, object to how we use it, or ask for a copy to move elsewhere. Email hello@example.com. We will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the Hellenic Data Protection Authority (dpa.gr) or, in the UK, to the Information Commissioner's Office (ico.org.uk).

Cookies

See our cookie policy for the small number of cookies the site uses.