Privacy Policy | Vandolira

1. Scope and application

Vandolira is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Vandolira, from browsing ratings to submitting a room request.

2. Information we collect

Delivering accurate lodging information, verified reviews, and dependable enquiry handling requires us to process the following categories:

Identity and contact details: Your name, title, language preference, country or region, email contact, and telephone details provided during profile creation or enquiry submission.
Stay preferences and requirements: Arrival and departure dates, room and bed configuration, suite category, dietary notes, accessibility requests, and any loyalty membership reference.
Billing verification records: Cardholder identity, partial card indicators, billing address, and processor-issued confirmation tokens. At no point is a full card number retained on Vandolira infrastructure.
Device telemetry and technical metadata: Your IP address, browser build, operating system, the page that referred you, time zone setting, device identifiers, and timestamps for page interactions.

3. Why we process, and on what basis

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Passing on your request: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Editorial personalisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Fraud prevention and security: Safeguarding digital infrastructure, validating the legitimacy of transactions, and shielding users from unauthorised profile access.
Keeping you informed: Sending enquiry updates, confirmations, itinerary reminders, and necessary customer service notices.
Statutory adherence: Fulfilling financial disclosure rules, tax obligations, and other legal mandates that apply to our operations.

4. Authorised disclosures

We do not sell, rent, or lease personal identifiers to unconnected commercial parties. Transfers happen only under contractual safeguards, and only to the following categories of recipient:

Partner properties: Selected properties are given only the name, arrival dates, and room details required to answer an enquiry or hold a room.
Certified payment gateways: Where payment is involved, encrypted billing details are routed to PCI-DSS validated processing partners.
Infrastructure providers: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Courts and regulators: Information may be released where a lawful subpoena, court order, or official mandate requires it, or to protect vital interests.

5. Digital identifiers and measurement

Cookies and browser storage let us recognise repeat visitors, remember currency and layout preferences, evaluate site performance, and preserve session integrity. You retain complete control through your browser, but switching off essential cookies degrades enquiry functionality.

6. Storage protection and retention

Protection is layered across administrative, technical, and physical measures: encrypted transport under TLS 1.3, AES-256 encryption at rest, isolated database clusters, and credentials restricted by role.

We retain data only for the time required to fulfil the request, handle follow-up questions, meet audit standards, or comply with a retention schedule set in law. After that, records are deleted or anonymised beyond recovery.

7. Your rights

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Access: Receive a copy of the data we hold about you, in a portable form, along with an explanation of its use.
Right to correction: Have inaccurate, incomplete, or outdated details corrected without undue delay.
Right to erasure: Ask for records to be deleted where no statutory or contractual basis for keeping them remains.
Right to restrict processing: Pause processing activity while a record's accuracy or our legitimate interest is under review.

Opt-out and your choices

Control over the collection and use of your personal information rests with you. Where local law provides for it, the following choices apply:

Data sharing and sale: You may opt out of the sale or sharing of your personal information with third parties where laws such as the CCPA/CPRA in California, or comparable legislation elsewhere, provide for it. While we do not sell personal information in the conventional sense, some data may be shared with trusted partners in order to provide or improve the service.
Cookies and tracking: Cookies and similar tracking tools can be managed or declined via your browser configuration or the consent controls published on this website.
Marketing messages: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Consent withdrawal: Where you previously consented to processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Revisions

We may update this notice as regulations or our systems change. Significant revisions are published here with a fresh effective date; continuing to use the site afterwards signifies acceptance.