1. Who we are
Elvestua provides direct booking and guest communication for stays at the property. For questions about this Privacy Policy or your personal data, please contact us using the contact details provided on the website.
2. What data we collect
When you use this website, we may collect the following information:
- Your name
- Your email address
- Your phone number, if provided
- Booking details such as check-in, check-out, number of guests, selected extras, and special requests
- Payment-related booking references and transaction status
- Technical data such as browser type, device information, and basic website usage logs
3. How we use your data
We use your data to:
- Process and manage bookings
- Send booking confirmations and guest communication
- Respond to questions or support requests
- Manage availability and selected services or extras
- Improve the website, booking flow, and guest experience
- Comply with legal, tax, and administrative obligations
4. Payments
Payments on this website are processed securely by Stripe. We do not store full card details on our own servers. Payment information is handled by Stripe according to their own security and privacy standards.
5. Booking and website systems
Your booking and guest data may be stored and processed using secure third-party systems that support the operation of this website, including hosting, database, communication, and payment services.
We only use such services where reasonably necessary for running the booking platform and managing guest stays.
6. Legal basis for processing
We process personal data on one or more of the following legal bases:
- To perform a contract or take steps related to a booking
- To comply with legal obligations
- For legitimate business interests, such as managing bookings and improving services
- Based on consent, where required
7. How long we keep your data
We keep personal data only for as long as necessary to manage bookings, provide guest support, meet legal obligations, and maintain essential business records.
Some booking and transaction data may need to be retained longer for accounting, legal, or fraud-prevention purposes.
8. Sharing of data
We do not sell your personal data. We may share data only when necessary with trusted service providers involved in operating the website and processing bookings, such as:
- Payment providers
- Hosting and database providers
- Email or communication services
- Authorities where required by law
9. Your rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Request a copy of your data
- Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the contact details on the website.
10. Cookies and analytics
This website may use essential technical cookies or basic analytics tools to improve performance and understand site usage. These tools are used in a limited way to help maintain and improve the booking experience.
11. Data security
We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect operational, legal, or technical changes. The latest version will always be published on this page.
13. Contact
If you have questions about this Privacy Policy or your personal data, please contact us via the contact details listed on the Elvestua website.