Privacy policy

What we collect

When you send an enquiry we store the details you type: name, contact channels, villa interest, budget band, timeline and your message, together with the page, language and campaign parameters the enquiry came from.

When you place an order, we also store the selected villa, retreat or stay, requested dates, quoted amounts, promo code, order status and any payment amount, method and reference recorded by the team. We never collect card or bank credentials on this site.

With analytics consent, the site stores a pseudonymous browser identifier in localStorage, a per-tab session identifier and ordered events such as page views, active engagement, selected sections, curated clicks, scroll depth and form stages. If you send an enquiry, consented sessions can be connected to your CRM contact so the team can understand the journey that produced and followed the enquiry.

We never record keystrokes, form drafts, session replay, precise location, IP addresses or a device fingerprint. Do-Not-Track and Global Privacy Control disable persistent analytics.

Why we collect it

Enquiry and order details let us answer you, verify availability, prepare the applicable contract or booking terms, and administer confirmation and payment. Usage events exist to understand which pages help visitors and which do not.

Where it lives and who sees it

Enquiries and orders are stored in the site’s own database, visible only to authorised team members, and sent through configured email and messaging providers. We do not sell your data or use it for unrelated advertising.

Retention

Anonymous usage events are kept for 90 days. A journey connected to an enquiry is kept for 24 months after the last interaction, then deleted. Transaction and accounting records may be retained longer where the law requires it.

Your choices

Write to us from the address you used and we will show, correct or delete the data we are not required to retain. Requests are handled within 30 days; transaction and accounting records may be kept where the law requires it.

Use “Privacy choices” at the bottom of any page to allow or stop analytics. Stopping removes the browser identifier from that browser and prevents new events. Write to us if you also want a server-linked journey exported or deleted.