Legal

Privacy policy

Draft — review before publishing. This is a GDPR-aware scaffold. Confirm the data controller details, retention periods and any processors (Netlify, the payment provider, email) before going live. Replace every {TODO}.

Who we are

Authentic Argyrades (“we”) operates https://corfupreservationproject.com and rents restored homes in Argyrades, Corfu, Greece. The data controller is {TODO: legal/business name and address}. Contact: david@corfupreservationproject.com.

What we collect

Details you send via the request-to-book or contact forms: name, email, phone, dates, guests and your message.
Basic, privacy-respecting analytics about site usage {TODO: name the analytics tool, or remove if none}.

How we use it

To answer your enquiry, arrange and manage your stay, take payment for a booking, and meet our legal and tax obligations. We rely on your consent and on the performance of a booking contract as our lawful bases.

Who we share it with

Service providers who help us run the site and bookings, for example: our form/host provider (Netlify), our payment provider ({TODO: name the processor once chosen — Viva / bank gateway / other}) and our email provider (Microsoft 365). We don’t sell your data.

How long we keep it

{TODO: e.g. enquiry data for 12 months; booking records as required by Greek tax law.}

Your rights

Under the GDPR you can request access to, correction of, or deletion of your data, and you can object to or restrict its processing. Email david@corfupreservationproject.com and we’ll respond. You may also complain to the Greek Data Protection Authority (HDPA).

Cookies

{TODO: state what cookies are used, if any. This static site uses none by default beyond what a provider sets.}

Last updated: {TODO: date}.