Legal

Privacy Policy

Last updated: March 2026

1. Who We Are

Azzura Villas operates private luxury holiday villas in Vasiliki, Lefkada, Greece. We are the data controller for personal information collected through this website.

To contact us regarding this policy or any privacy matter, please use our contact form.

2. What Data We Collect

We collect personal data only when you voluntarily provide it. This includes:

  • Name and email address, when you submit an enquiry via our contact form
  • Travel dates and number of guests, when included in your enquiry
  • Any additional information you choose to include in your message

We do not collect payment information directly. Booking payments are processed through third-party platforms subject to their own privacy policies.

3. How We Use Your Data

We use the information you provide solely to:

  • Respond to your enquiry about availability or bookings
  • Communicate with you in connection with a confirmed reservation
  • Send occasional updates about the villas, only if you have given explicit consent

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

  • Legitimate interest — to respond to enquiries you have initiated
  • Contract performance — to manage a booking you have made
  • Consent — for any marketing communications, which you may withdraw at any time

5. Data Retention

Enquiry data is retained for up to 24 months from the date of your last communication with us, after which it is securely deleted. Data relating to confirmed bookings may be retained for up to 7 years for legal and tax compliance purposes.

6. Cookies and Analytics

This website uses Vercel Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personally identifiable information. It provides anonymised, aggregated data about how visitors use our site.

No cookie consent is required as no tracking cookies are set by this website.

7. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict how we process your data
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. All data transmitted through our contact form is encrypted in transit.

9. Third-Party Links

This website contains links to third-party platforms (such as Google Maps and booking sites). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page. Continued use of this website following any update constitutes acceptance of the revised policy.