17 September 2025

Privacy Policy

At VICHY Holidays Cyprus, we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, and protect your data when you visit our website, book services, or interact with our platform. By using our services, you agree to the practices described in this policy.

  1. Information We Collect

We collect information to provide and improve our services.

1.1 Personal Information

Information you provide directly:

  • Full name

  • Email address

  • Phone number

  • Booking details (arrival date, property, preferences)

  • Payment information (processed securely via third-party providers)

  • Messages, inquiries, and customer support communication

1.2 Automatically Collected Information

When you use our website:

  • IP address

  • Browser type and device information

  • Pages visited and time spent on site

  • General location (city/region level)

1.3 Third-Party Information

We may receive data from:

  • Payment providers (e.g. Stripe, PayPal)

  • Analytics tools (e.g. Google Analytics)

  • Advertising platforms (e.g. Meta/Facebook Pixel)

  1. How We Use Your Information

We use your data for:

  • Processing and managing bookings and upgrade services

  • Communicating with you regarding your stay

  • Providing customer support

  • Improving our website and services

  • Sending marketing communications (only if you opt in)

  • Preventing fraud and ensuring security

  1. Legal Basis for Processing (GDPR)

We process your data based on:

  • Contract performance (to deliver services you purchased)

  • Legitimate interests (business operations, service improvement)

  • Consent (for marketing communications)

  • Legal obligations

  1. Sharing Your Information

We do NOT sell your personal data.

We may share your information with:

4.1 Service Providers

  • Payment processors

  • Cleaning teams and service providers

  • Concierge and transportation providers

  • IT and hosting services

4.2 Legal Authorities

  • If required by law or legal process

4.3 Business Transfers

  • In case of merger or sale of the business

  1. Data Security

We implement appropriate security measures:

  • SSL encryption

  • Secure hosting and data storage

  • Restricted access to personal data

  • Monitoring and protection against unauthorized access

  1. Cookies and Tracking Technologies

We use cookies to improve your experience.

Types of cookies:

  • Essential cookies (site functionality)

  • Analytics cookies (performance tracking)

  • Marketing cookies (advertising, if consent given)

You can manage cookies via your browser settings.

  1. Your Rights

You may have the right to:

  • Access your data

  • Correct inaccurate information

  • Request deletion of your data

  • Withdraw consent for marketing

  • Request data portability

To exercise your rights, contact us at the email below.

  1. Data Retention

We retain your data only as necessary:

  • Booking data: up to 7 years (legal/accounting purposes)

  • Marketing data: until you unsubscribe

  • Support data: up to 3 years

  1. International Data Transfers

Your data may be processed outside your country with appropriate safeguards in place.

  1. Third-Party Links

Our website may include links to third-party services. We are not responsible for their privacy practices.

  1. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from minors.

  1. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a revised date.