Privacy Policy

1. Information we collect

Booking details you give us directly: your name, email address, phone number, the property, dates, number of guests, and any notes you add to a booking or inquiry.

Payment information: card and billing details are collected and processed directly by our payment processor, Stripe; we do not receive or store your full card number on our servers.

Account and session information for travel-agent partners: login credentials, partner rates viewed, and booking or payment-link activity.

Technical information collected automatically: IP address, browser and device information, and pages visited, used for security, fraud prevention, and improving the website.

2. How we use your information

To create and manage your booking, process payment, and send confirmations and stay-related updates.

To respond to inquiries and contact-form messages, and to communicate about your account if you are a partner.

To detect and prevent fraud, abuse, and unauthorized use of the website, including rate-limiting suspicious activity.

To comply with legal, tax, and accounting obligations, and to enforce our Terms of Service and this Policy.

3. Payment processing

Payments are processed by Stripe, Inc., a PCI-DSS-compliant payment processor. When you pay, you provide your card details directly to Stripe through its secure checkout; Villas Rents receives confirmation of payment and limited billing details, not your full card number.

4. Email communications

We send transactional emails, such as booking confirmations and account notifications, through Resend, our email delivery provider. These messages are necessary to fulfill your booking or respond to your request and are not marketing unless you separately opt in to receive updates.

5. Cookies and session data

We use strictly necessary cookies to keep you signed in, remember your language preference, and protect the website against fraud, such as session and authentication cookies. We do not use cookies for third-party advertising.

6. Hosting and infrastructure

Booking, account, and message data is stored using Supabase, our database and authentication provider, which applies industry-standard security controls including encryption in transit and row-level access controls.

7. Sharing your information

We share information with service providers who process it on our behalf under contract, including Stripe (payments), Resend (email delivery), and Supabase (hosting), and with the owner of a property you book, to the extent necessary to fulfill your stay.

We do not sell your personal information. We may disclose information where required by law, to protect our rights, or to prevent fraud or harm.

8. Data retention

We keep booking and contact records for as long as needed to provide our services, meet accounting and tax obligations, resolve disputes, and enforce our agreements, after which we delete or anonymize the data.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain uses. To exercise any of these rights, contact us at info@villasrents.com and we will respond within a reasonable time.

10. Children's privacy

This website is not directed to children under 18, and we do not knowingly collect personal information from children. Bookings and accounts must be created by an adult.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page shows when the current version took effect.

12. Contact us

For privacy questions or requests, contact us at info@villasrents.com or through our contact page.