Privacy Policy

1. Who We Are

This Privacy Policy applies to VestaGrove Ltd ("VestaGrove", "we", "us", or "our"), a company registered in England and Wales, operating the VestaGrove luxury property rental platform.

Data Controller: VestaGrove Ltd
Email: lettings@vestagrove.co.uk
Phone: 07494 243625

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity & Contact Data: Name, email address, phone number
• Booking Data: Check-in/check-out dates, number of guests, special requests
• Payment Data: Payment card details (processed securely by our payment provider — we do not store full card numbers)
• Communications: Enquiries, messages, and feedback you send us
• Technical Data: IP address, browser type, device information, pages visited, and cookies (see Section 9)
• Usage Data: Information about how you use our website and services

3. How We Use Your Data

We use your personal data for the following purposes and legal bases:

• Processing your booking — necessary for the performance of a contract with you
• Sending booking confirmations and updates — necessary for the performance of a contract
• Providing customer support — legitimate interests and contractual necessity
• Improving our website and services — legitimate interests
• Sending marketing communications — only with your explicit consent; you may withdraw consent at any time
• Complying with legal obligations — legal obligation

4. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• Property owners and managers — to fulfil your booking
• Payment service providers — to process transactions securely
• Email service providers — to send booking confirmations and notifications
• Analytics providers — to understand how our website is used (data is anonymised or pseudonymised)
• Legal or regulatory authorities — where required by law

All third parties are contractually required to handle your data securely and in accordance with applicable data protection law.

5. International Data Transfers

Some of our service providers may process your data outside the UK or European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by UK regulators.

6. How Long We Retain Your Data

• Booking records: 7 years from the date of your stay (for legal and tax compliance)
• Marketing preferences: Until you withdraw consent
• General enquiries: 2 years from the date of your last contact
• Technical/log data: Up to 12 months

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — to request a copy of your personal data
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data ("right to be forgotten") where applicable
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not use automated decision-making or profiling

To exercise any of these rights, please contact us at lettings@vestagrove.co.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and regular security reviews. However, no online transmission is completely risk-free.

9. Cookies

Our website uses cookies to improve your browsing experience. Cookies we use include:

• Essential cookies — necessary for the website to function (e.g. session management)
• Analytics cookies — to understand usage patterns and improve our service (anonymised data)
• Preference cookies — to remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at lettings@vestagrove.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact Us

For any privacy-related queries or to exercise your rights:
VestaGrove Ltd
Email: lettings@vestagrove.co.uk
Phone: 07494 243625