Privacy Policy
Last updated: May 22, 2025

Purpose of This Privacy Policy

This privacy policy explains what personal data we collect, why we collect it, and how we use it. It also outlines your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

We will only process your personal data in accordance with this policy, any communications we have with you, or as otherwise permitted by applicable laws.

Who We Are

Doorways Villa Vacations LLC is the data controller of your personal information. Our contact details are provided at the end of this policy.

What Is Personal Data and What Does 'Processing' Mean?

Personal data is information that identifies or relates to an identifiable person.
Processing means any operation performed on personal data—such as collecting, storing, using, sharing, or deleting it.

What Data Do We Collect and Why?

We collect personal data when you contact us, use our services, or interact with us directly or via third parties (such as travel agents or service providers). We may also collect information from public sources like the Land Registry.

Examples of personal data we collect:

  • Names of all guests

  • Contact information (e.g. email, phone, mailing address)

  • Medical conditions, disabilities, or dietary needs

  • Group composition, ages, passport/nationality data

  • Emergency contact/next of kin

  • Notes from our interactions with you

  • Copies of ID documents

  • Feedback from you or third parties

  • CCTV footage at villas (for security purposes)

We collect this data to:

  • Process bookings or inquiries

  • Comply with legal obligations

  • Ensure your safety in emergencies

  • Send marketing materials (including SMS)

Who We Share Your Data With

We may share personal data with:

  • Villa owners, caretakers, and experience providers

  • Banks or credit card processors

  • Government or regulatory authorities (as required by law)

  • Marketing and mailing service providers

  • SMS providers (for promotional or service messages)

All third parties are contractually required to protect your data and only use it for the purpose specified.

Where Is Your Data Processed?

Your data may be processed in the UK, the EEA, or outside the EEA. If processed outside the EEA, we ensure appropriate safeguards (e.g., data protection contracts) are in place.

How We Protect Your Data

We implement technical and organizational measures to protect personal data against unauthorized access, disclosure, loss, or destruction.

Marketing Communications (Including SMS)

We may send you marketing materials by:

  • Email

  • SMS/text messages

  • Phone

  • Mail

You can select your preferred communication method and opt out at any time. To unsubscribe from SMS, reply STOP. You may also contact us directly to update your preferences.

Your GDPR and UK Data Protection Rights

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Withdraw consent

  • Request erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Lodge a complaint with a data protection authority

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

  1. Know what categories of personal information we collect, use, and disclose

  2. Request access to your personal information

  3. Request deletion of your personal information

  4. Correct inaccurate information

  5. Opt out of the sale or sharing of personal information

  6. Limit the use of your sensitive personal information (if applicable)

  7. Non-discrimination for exercising your privacy rights

We do not sell your personal information to third parties.

To exercise your California rights, email us or call us.

We will confirm your identity before processing any request and respond within the time required by law.

Data Retention

We retain personal data only as long as necessary to:

  • Provide services

  • Comply with legal obligations

  • Resolve disputes

  • Enforce agreements

For marketing, we keep data until you withdraw your consent or it is no longer relevant.

Cookies and Online Advertising

Our website uses cookies to improve functionality and personalize content. We also use cookies for analytics and advertising, including remarketing on other websites and social media platforms. You can control cookie settings in your browser.

Changes to This Policy

We may update this policy to reflect changes in laws or business practices. Please review this page periodically.

Questions or Complaints

For any questions, to exercise your rights, or to file a complaint, contact:

Doorways Villa Vacations LLC
Website: www.villavacations.com

California residents may also contact the California Privacy Protection Agency (CPPA) or visit www.oag.ca.gov/privacy for more information.