Privacy Policy
How Villa Plaka Divani collects, uses and protects your personal information.
Last updated: November 2026
Who we are
This website is operated by Villa Plaka Divani, a private holiday villa in Plaka, Naxos, Greece (“we”, “us”). We are responsible for the personal information you share with us through this website. For any privacy question or request, please use our Contact page.
What we collect
- Information you send us: when you use our contact or reservation forms, we receive your name, email address, phone number (optional), travel dates, number of guests and any message you write.
- Booking information: if you book with us, we keep the details needed to manage your stay, issue invoices and meet our legal obligations.
- Payments: card payments are processed securely by Stripe. We never see or store your full card details.
- Website analytics (only with your consent): if you accept analytics cookies, Google Analytics collects anonymised information about how you use the site, such as pages visited and the type of device used.
Why we use it
- To answer your enquiries and prepare your quote (steps taken at your request before a booking).
- To manage your booking and stay (performance of our agreement with you).
- To meet legal obligations, such as Greek tax, invoicing and short-term rental requirements.
- To understand and improve our website (only if you have consented to analytics cookies).
- To keep our website and bookings secure and prevent misuse (our legitimate interests).
We do not sell your personal information, and we do not use it for unrelated marketing.
Who we share it with
We only share information where needed to run our service, with:
- Service providers that help us operate: our website host (Namecheap), our form delivery service (FormSubmit), our email provider (Google) and our payment provider (Stripe).
- Google Analytics, only if you have accepted analytics cookies.
- Our property management and housekeeping team, only the details they need to prepare for your stay.
- Public authorities, where required by law.
If you book through a platform such as Booking.com or Vrbo, that platform’s own privacy policy also applies. Some of our providers are based outside the European Economic Area; in these cases your information is protected by safeguards recognised under EU law, such as Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
Enquiries that do not lead to a booking are deleted at the end of each season. Booking and invoicing records are kept for as long as Greek tax and accounting law requires (generally five years). Analytics data is kept in anonymised form according to our Google Analytics settings.
Cookies
Our website does not use advertising cookies. Analytics cookies are set only after you click “Accept” on our cookie banner. Your choice is remembered in your browser, and you can change it at any time through the Cookie settings link at the bottom of every page.
Your rights
Under the EU General Data Protection Regulation (GDPR), you can ask to access, correct or delete your personal information, restrict or object to how we use it, receive a copy of it, and withdraw your consent at any time. To make a request, please contact us through our Contact page. If you are not satisfied with our response, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Security
Our website uses an encrypted (HTTPS) connection, and we limit access to your information to the people who need it to look after your stay.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.