Privacy policy

Account data: first name, last name, nationality, phone number, email address and your chosen language. Your password is stored only as a secure, irreversible hash.

Sign-in with Google, Facebook or Apple: your name, your email address and a technical account ID from the provider. We never receive your password for these services.

Booking data: the villa, your travel dates, the number of guests, the price, your MTCN number, the payment screenshot you upload and the contact details you enter.

Technical data: a session cookie that keeps you signed in, a language cookie and an automatic security check by Cloudflare Turnstile that protects our forms against automated abuse.

We use your data to provide your personal account, to process your booking requests, to verify your payments, to send you confirmations by email and SMS, to answer your questions and to protect the platform against misuse.

We send you messages related to your account and your bookings, for example a welcome message, a confirmation of receipt, your booking confirmation and one-time security codes.

Our emails can contain a small tracking image and tracked links, so that we can see whether a message was opened. You can prevent this by blocking images in your email program.

We work with carefully selected service providers: Modulify for hosting and email delivery, Twilio for sending SMS, Cloudflare for the security check, and Google, Facebook or Apple if you choose to sign in with them. Western Union processes your money transfer under its own privacy policy.

We measure page visits anonymously and without cookies to improve our platform. This does not identify you personally.

We keep your account data as long as your account exists. Booking data is kept as long as it is needed for the booking and as required by law. Security codes expire after 10 minutes and can only be used once.

You have the right to access, correct and delete your data, to restrict or object to its processing and to receive your data in a common format. To exercise these rights, simply contact us. You can also lodge a complaint with a data protection authority.