Privacy Policy | Vostinera

1. Scope of this notice

Vostinera is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Vostinera, from browsing ratings to submitting a room request.

2. What we collect through the service

The following categories are collected so that we can provide accurate availability, verified editorial assessments, and reliable confirmations:

Who you are and how to reach you: Your name, title, language preference, country or region, email contact, and telephone details provided during profile creation or enquiry submission.
Reservation preferences: Arrival and departure dates, room and bed configuration, suite category, dietary notes, accessibility requests, and any loyalty membership reference.
Billing and payment confirmation records: Cardholder identity, partial card indicators, billing address, and processor-issued confirmation tokens. At no point is a full card number retained on Vostinera infrastructure.
Technical and device data: Your IP address, browser build, operating system, the page that referred you, time zone setting, device identifiers, and timestamps for page interactions.

3. Legal grounds and operational purposes

Vostinera processes records only where a recognised legal basis applies: performance of a contract, legitimate business interest, compliance with a statutory duty, or your explicit consent. The operational purposes are:

Passing on your request: Forwarding your stay details to the relevant property so it can respond on availability and prepare for arrival.
Content customisation: Presenting hospitality rankings and reviews aligned with the regions and property categories you browse.
Fraud prevention and security: Keeping the infrastructure secure, verifying that requests are legitimate, and preventing unauthorised access to reader profiles.
Keeping you informed: Sending enquiry updates, confirmations, itinerary reminders, and necessary customer service notices.
Statutory adherence: Meeting accounting, tax reporting, and record-keeping requirements set by the applicable administrative authorities.

4. Who receives your information

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

The hotels themselves: Resorts receive the guest name, dates, and accommodation specifics strictly necessary to respond to a request or honour a reservation.
Accredited payment intermediaries: Where payment is involved, encrypted billing details are routed to PCI-DSS validated processing partners.
Technical infrastructure partners: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Authorities where the law requires: Information may be released where a lawful subpoena, court order, or official mandate requires it, or to protect vital interests.

5. Cookies and analytics

We use cookies and local storage to recognise returning readers, retain display preferences, measure performance, and keep sessions intact. Browser settings give you full control over these, though disabling essential cookies will limit parts of the enquiry process.

6. Safeguards and how long we keep records

Layered administrative, technical, and physical controls protect records against unauthorised access, loss, alteration, or extraction. These include TLS 1.3 in transit, AES-256 at rest, segregated database clusters, and role-restricted credentials.

Retention lasts no longer than the enquiry, any related correspondence, audit obligations, or a statutory holding period demand. At expiry, records are erased permanently or anonymised irrevocably.

7. Individual rights

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Access: Receive a copy of the data we hold about you, in a portable form, along with an explanation of its use.
Rectification: Request prompt correction of profile information that is wrong, partial, or out of date.
Deletion: Have your data removed once processing is no longer required by law or by the purpose it served.
Limiting processing: Pause processing activity while a record's accuracy or our legitimate interest is under review.

Choices you can exercise

How your personal information is gathered and used remains under your control. Subject to your location and the applicable legislation, you may exercise these opt-outs:

Sharing and sale of your data: You may opt out of the sale or sharing of your personal information with third parties where laws such as the CCPA/CPRA in California, or comparable legislation elsewhere, provide for it. While we do not sell personal information in the conventional sense, some data may be shared with trusted partners in order to provide or improve the service.
Tracking technologies: Cookies and similar tracking tools can be managed or declined via your browser configuration or the consent controls published on this website.
Marketing messages: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Consent withdrawal: Where you previously consented to processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Changes to this notice

Vostinera may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.