Legal

Privacy policy

Sample policy — to be reviewed against the Digital Personal Data Protection Act, 2023, GDPR (for EU guests) and the property's own practices before going live.

What we collect

When you book, we collect your name, contact details, country of residence, stay details and any special requests. Card payments are processed by our payment provider; we retain only the card brand and last four digits.

How we use it

To manage your reservation, personalise your stay, meet legal obligations (such as guest registration) and — only if you opt in — send you occasional offers.

Cookies

We use a strictly necessary session cookie to keep your booking in progress and to protect forms against forgery. We do not use advertising cookies.

Your rights

You can request access to, correction of or deletion of your personal data at any time by writing to stay@aureliagrand.example.