Privacy Policy
Last updated: 1 May 2025
1. Who we are
Canary Villas (“we”, “us”, “our”) is an independent holiday villa agency based in Corralejo, Fuerteventura, Spain. Our website is canaryvillas.com. You can contact us at info@canaryvillas.com or +44 7809 870561.
2. What data we collect
We collect personal data in the following situations:
- Booking enquiries & reservations — name, email address, phone number, travel dates, number of guests, and payment information (processed securely by Stripe; we never store card numbers).
- Contact form submissions — name, email, and any message content you provide.
- Cookies — see Section 5 below.
3. How we use your data
- To process and manage your booking
- To send booking confirmation, arrival instructions, and invoice emails
- To respond to enquiries and provide pre- and post-stay support
- To send marketing emails (only if you have opted in — you can unsubscribe at any time)
4. Legal basis (GDPR)
We process your data under the following lawful bases:
- Contract — processing necessary to fulfil a booking you have made
- Legitimate interests — responding to enquiries and providing customer support
- Consent — marketing emails and optional cookies
5. Cookies
We use the following cookies:
| Cookie | Type | Purpose |
|---|---|---|
cv_cookie_consent | Strictly necessary | Stores your cookie preference (localStorage, not transmitted to our servers) |
| Stripe cookies | Strictly necessary | Required to process secure card payments. Set by Stripe.com. |
| Google Maps cookies | Optional | Set when you enable the interactive map on villa pages. Subject to Google's Privacy Policy. |
You can accept or decline optional cookies using the banner shown on your first visit. You can change your preference at any time by clearing your browser's local storage.
6. Third-party processors
- Stripe — payment processing (Stripe Privacy Policy)
- Google Maps — interactive maps on villa pages, only loaded with your consent (Google Privacy Policy)
- Vercel — website hosting. Server logs may include IP addresses for security purposes.
- Resend / SMTP provider — transactional email delivery
We do not sell your data to any third party.
7. Data retention
We retain booking records for 7 years to comply with tax and accounting obligations. Contact enquiries that do not result in a booking are deleted after 2 years. Marketing opt-in records are kept until you unsubscribe.
8. Your rights
Under UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (without affecting prior processing)
To exercise any of these rights, email info@canaryvillas.com. We will respond within 30 days.
9. Security
All data is transmitted over HTTPS. Card payments are handled entirely by Stripe using PCI-DSS compliant infrastructure — we never see or store your full card number.
10. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will reflect any changes. Continued use of the site after a change constitutes acceptance of the updated policy.
11. Contact & complaints
For privacy queries: info@canaryvillas.com
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (UK): ico.org.uk, or the Spanish data protection authority (AEPD): aepd.es.