Privacy Policy

1. Information We Collect

When you book a stay, contact us, or browse our website, we may collect the following information:

• Name, email address, phone number
• Billing and payment information (processed securely via Stripe)
• Booking details (dates, property, guest count)
• Communications you send us (contact forms, emails)
• Device and usage data (cookies, IP address, browser type)

2. How We Use Your Information

• Process and manage your bookings
• Send booking confirmations and check-in instructions
• Respond to your inquiries and support requests
• Improve our website and services
• Send marketing communications (only with your consent)
• Comply with legal obligations

3. Payment Security

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. We never store your full credit card number on our servers. Payment data is encrypted in transit and at rest.

4. Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies (such as Vercel Analytics) to understand how visitors use our site. You can disable cookies in your browser settings, though some features may not work correctly.

5. Third-Party Services

We share data with the following third-party services as necessary:

• Stripe — payment processing
• Supabase — database and authentication
• Resend — transactional email delivery
• Vercel — website hosting and analytics

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Booking records are retained for a minimum of 7 years for tax and legal compliance.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Lodge a complaint with a data protection authority

8. Contact Us

If you have questions about this privacy policy or your personal data, contact us at fortecaestate@gmail.com.