Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, and password when you create an account.
• Booking Information: Travel dates, guest details, payment information, and special requests.
• Communication: Messages you send to hosts, customer support inquiries, and reviews.
• Profile Data: Profile photo, preferences, and saved properties.

We also automatically collect:

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, search queries, click patterns, and time spent on site.
• Location Data: Approximate location based on IP address (with your consent for precise location).

2. How We Use Your Information

We use your personal data to:

• Process and manage your bookings
• Communicate about your reservations and account
• Provide customer support
• Personalize your experience and show relevant properties
• Send marketing communications (with your consent)
• Prevent fraud and ensure security
• Comply with legal obligations
• Improve our services through analytics

3. Information Sharing

We may share your information with:

• Property Owners/Managers: To process your booking and facilitate your stay.
• Service Providers: Payment processors, email services, analytics providers, and customer support tools.
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with mergers, acquisitions, or sale of assets.

We never sell your personal data to third parties for their marketing purposes.

4. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyze site traffic and usage patterns
• Personalize content and advertisements
• Provide social media features

You can manage cookie preferences through your browser settings or our Cookie Settings page.

5. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Regular security audits and penetration testing
• Access controls and employee training
• Data backup and disaster recovery procedures

6. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements

You can request deletion of your account and associated data at any time.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Opt out of certain processing activities
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at privacy@belvilla.com.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For privacy-related inquiries, contact our Data Protection Officer: