Privacy policy

1. Who we are

Cosmic Villas Ltd (“we”, “us”) is the data controller for personal data collected through this website. We are registered in England & Wales under company number 5279227, at 126-128 Uxbridge Road, London W13 8QS, United Kingdom. For any question about your data, email info@cosmicvillas.com.

2. What we collect

The personal data we collect comes almost entirely from the enquiry form. When you send a booking request we collect:

• your name, email address and telephone number;
• your requested dates, party size and, if you choose to share them, your budget, the occasion and any special requirements;
• the page you enquired from and basic technical information such as how you found us, used to keep the enquiry in context;
• a record of the consents you gave and when - including whether you opted in to marketing.

If you save villas to your favourites, that shortlist is stored only in your own browser - it never reaches our servers.

3. Why we use it

We use your enquiry data to process the enquiry: to confirm availability with the villa's supplier or owner, to reply to you personally, to suggest alternatives if your first choice isn't free, and to keep an accurate record of the request as it progresses. If - and only if - you opted in, we may also send you occasional marketing emails.

4. Our lawful basis

Under UK GDPR, we process enquiry data because it is necessary to take steps at your request before entering into a contract (Article 6(1)(b)), and, for keeping records of how enquiries were handled, because we have a legitimate interest in running our business properly (Article 6(1)(f)). Marketing emails are sent only with your consent (Article 6(1)(a)), which you can withdraw at any time.

5. Who we share it with

To progress a booking request we share the relevant details - your name, contact details, dates and party size - with the supplier or owner of the villa you asked about. We also use service providers to run the website and deliver email; they process data on our instructions only. We do not sell your personal data, and we never will.

6. How long we keep it

We keep enquiry records for as long as we need them to handle your request and for a reasonable period afterwards, so we can deal with follow-up questions and meet our legal and accounting obligations. If you opted in to marketing, we keep your details for that purpose until you unsubscribe or ask us to stop. When data is no longer needed, we delete it.

7. Marketing is always optional

Marketing consent is separate from your enquiry - declining it never affects how we handle your request. If you did opt in, every marketing email includes an unsubscribe link, or you can simply email info@cosmicvillas.com and we'll remove you.

8. Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given. To exercise any of these rights, email info@cosmicvillas.com - we will respond within one month.

9. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.