Privacy Policy

Last updated: March 2026

1. Who we are

This website is operated by Casa Maria (“we”, “us”, “our”), a private villa rental business based in Novelda, Alicante, Spain.

Contact email: hello@staycasamaria.com

We are the data controller responsible for your personal data.

2. What data we collect

We may collect and process the following personal data:

  • Full name

  • Email address

  • Phone number

  • Booking details (dates, number of guests, preferences)

  • Payment information (processed securely via third-party providers)

  • Identification details where required by Spanish law (guest registration requirements)

  • Website usage data (via cookies and analytics tools)

3. How we collect your data

We collect data when you:

  • Submit an enquiry form

  • Make a booking or payment

  • Contact us via email or WhatsApp

  • Browse our website (via cookies and analytics tools)

4. Why we use your data

We process your personal data for the following purposes:

  • To respond to enquiries and manage bookings

  • To process payments and security deposits

  • To comply with legal obligations in Spain (including guest registration requirements where applicable)

  • To improve our website and services

  • To communicate important information about your stay

We only use your data where we have a lawful basis, including contract performance, legal obligation, or legitimate interest.

5. Sharing your data

We may share your data with trusted third parties where necessary:

  • Smoobu – booking and channel management

  • Stripe – secure payment processing

  • Email and hosting providers (e.g. Google Workspace, Squarespace)

  • Legal authorities where required under Spanish law

We do not sell or rent your personal data to third parties.

6. Data retention

We retain your personal data only as long as necessary:

  • Booking and financial records: up to 5–6 years (for tax/legal purposes)

  • Enquiry data: up to 12 months if no booking is made

  • Guest registration data: as required by Spanish law

7. Your rights

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

To exercise any of these rights, contact us at:
hello@staycasamaria.com

You also have the right to lodge a complaint with a supervisory authority in the EU.

8. Cookies & analytics

We use cookies and similar technologies to:

  • Ensure the website functions properly

  • Analyse website traffic (e.g. Google Analytics)

  • Improve user experience

You can control or disable cookies through your browser settings.

9. Data security

We take reasonable technical and organisational measures to protect your personal data. Payments are processed securely via third-party providers and we do not store full payment card details.

10. International transfers

Some of our service providers may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

12. Contact

If you have any questions about this policy or your data, please contact:

Casa Maria
Email: hello@staycasamaria.com