Privacy Policy

Last updated: 15 July 2025

Thank you for visiting Inventa’s Villa (“we”, “us”, “our”), accessible at www.infentasvilla.com (the “Site”). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and the choices you have in relation to your information.

1. Scope of this Policy

This Policy applies to all visitors and users (“you”, “your”) who access the Site or otherwise provide personal information when enquiring about or making a booking at Inventa’s Villa (the “Property”). By using the Site, you acknowledge that you have read and understood this Policy.

2. Information We Collect

Category	Examples of Data	Purpose
Identity & Contact Data	Full name, postal address, email‑address, telephone number, nationality, passport/ID details (where required by local law).	To create and manage bookings, verify identity, comply with legal obligations.
Booking Details	Check‑in and check‑out dates, number of guests, special requests, flight details, arrival times.	To provide accommodation services and personalise your stay.
Payment Information	Credit/debit card number, expiration date, CVC. Note: Card data is processed by our payment processor PayHere and is not stored on our servers.	To secure and process payments, refunds, security deposits.
Communications	Emails, messages, feedback, reviews.	Customer support, dispute resolution, improve our services.
Automatically Collected Data	IP address, browser type, device identifiers, referring pages, time‑stamps, cookies.	Site analytics, security, improve site performance, marketing (with consent where required).

3. Legal Bases for Processing

We process your personal information only where at least one of the following applies (depending on the jurisdiction): 1. Contract: To take steps at your request prior to entering into a booking contract or to perform that contract. 2. Legitimate Interests: To manage our business (e.g., prevent fraud, ensure network security), provided those interests are not overridden by your rights. 3. Consent: For optional marketing communications or non‑essential cookies. You may withdraw consent at any time. 4. Legal Obligation: To comply with accounting, tax, and guest‑registration laws.

4. How We Use Your Information

Confirm, administer, and fulfil bookings.
Process payments and refunds.
Respond to enquiries and provide customer service.
Personalise your stay (e.g., arranging transfers, dietary requirements).
Send you transactional or service‑related messages.
With your consent, send promotional offers, newsletters, or satisfaction surveys.
Detect and prevent fraud or security incidents.
Maintain business records and comply with legal obligations.

5. Sharing & Disclosure of Your Information

We do not sell your personal data. We may share it: * Service Providers: Such as payment processors, IT hosting, email service, housekeeping or concierge partners—only to the extent necessary to perform services on our behalf and under confidentiality agreements. * Legal & Regulatory: To law‑enforcement, courts, or regulators when required or permitted by law. * Corporate Transactions: In connection with a sale, merger, or re‑organisation of our business (your data will remain protected).

6. Cookies & Similar Technologies

We use essential, performance, analytics, and advertising cookies. You can manage your cookie preferences through our Cookie Banner or your browser settings. For detailed information, please see our separate Cookie Policy.

7. Data Retention

We retain booking records, invoices, and associated personal data for 2 years or as long as required by applicable financial and tourism laws. When no longer needed, data is securely deleted or anonymised.

8. International Data Transfers

Your information may be stored and processed in countries other than your own. Where required, we implement safeguards such as Standard Contractual Clauses or rely on adequacy decisions to protect your data.

9. Security Measures

TLS/HTTPS encryption on all data in transit.
PCI DSS‑compliant payment processing.
Encryption-at‑rest for sensitive data.
Access controls and staff training.
Regular security audits and vulnerability assessments.

Despite these measures, no internet transmission or storage system is guaranteed 100% secure. We encourage you to use unique passwords and to contact us immediately if you suspect any misuse of your booking information.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to: * Access, correct, or delete your personal data. * Restrict or object to certain processing. * Receive a copy of your data in a portable format. * Withdraw consent at any time without affecting the lawfulness of prior processing. * Lodge a complaint with a supervisory authority.

Please contact us (see Section 13) to exercise your rights. We endeavour to respond within 30 days.

11. Children’s Privacy

The Site is not directed to children under 16 years (or the minimum age required by local law). We do not knowingly collect personal information from children. If we become aware that we have inadvertently received such data, we will delete it promptly.

Privacy Policy

1. Scope of this Policy

2. Information We Collect

3. Legal Bases for Processing

4. How We Use Your Information

5. Sharing & Disclosure of Your Information

6. Cookies & Similar Technologies

7. Data Retention

8. International Data Transfers

9. Security Measures

10. Your Privacy Rights

11. Children’s Privacy

12. Third‑Party Links

13. Contact Us

14. Changes to This Policy

15. Questions & Feedback

Privacy Policy

Main Menu

Let's Start A Conversation