Cookie & Privacy Policy
Last updated: October 17, 2025
Private Villas International LLC (referred to herein as “Company”, “we”, “us”, or “our”), is committed to protecting your privacy. This Privacy Policy outlines how your personal information is collected, used, and shared when you visit or make a reservation through any of our websites or services. In order to provide you with a great booking and lodging experience, we collect personal data about you on different occasions, such as when you browse our websites (collectively, the “Website”), use our mobile apps (collectively, the “App”), book or stay at one of our “Properties”, or when you purchase “Concierge Services” during your stay. Together, the Website, App, Concierge Services and all other services provided by Company to you and other guests are referred to herein as the “Services.”
This Privacy Policy, which is incorporated by reference into our Terms of Service, outlines how and when we collect, use, and share personal data from you and other users of our Services.
Who We Are
Private Villas International LLC is a provider of short-term lodging booking and management Services, as well as related Concierge Services provided to guests at our Properties. Although we refer to “our Properties” in this Privacy Policy for ease of reference, such Properties are managed by us and/or our affiliated entities and service providers, but are owned by independent Third Parties.
Our contact information is as follows:
Private Villas International LLC
3 Germay Drive
Wilmington, DE 19804
United States of America
+1 (786) 978-9087
Third Parties
“Third Parties” include any person or entity other than you and our companies and employees. Third Parties include, but are not limited to, Property owners, government agencies, our marketing partners, suppliers, service providers, and other vendors that help us provide the Services. The Website may include links to Third-Party websites and apps.
Unless otherwise expressly stated, this Privacy Policy does not apply to any Third-Party practices, websites, mobile apps, or services. Third Parties may have their own privacy practices and policies, which you should review before engaging with their platforms and services.
Our Collection of Personal Data
How We Collect Personal Data
We collect personal data directly from you at various points during your booking and lodging experience. We primarily collect personal data when you engage with us, whether through the Website, App, in person, or other means, such as:
- When you browse or complete a form on the Website;
- When you install or use the App;
- When you click on a link in a Company advertisement;
- When you book, change, or cancel a stay at one of our Properties or related Services, such as Concierge Services (each, a “Booking”), whether online or through a representative of Company;
- When you make payments to us;
- When you check-in or check out of a Property;
- When you communicate with us, such as by speaking to one of our customer service agents;
- When you post content to the Website or App, such as a review (“your Content”);
- When you join and/or participate in any customer loyalty program (the “Loyalty Program”) offered by Company;
- When you sign up to receive email, text/SMS, or other communications from us;
- When you participate in a survey, contest, or sweepstakes administered by Company; and/or
- When you apply for a job with Company.
We collect personal data from Third Parties, such as:
- When you create or modify a Booking through a Third-Party travel agent;
- When another guest (the “Lead Guest”) creates a Booking for you (such as when you are staying in the same Property as the Lead Guest);
- When we receive personal data from customs agents, border patrol, and other government agencies; and/or
- When you purchase Concierge Services from a Third-Party.
Like most websites and apps, we collect data through automated technologies on our Website and App, such as cookies, web beacons and pixels. These practices are discussed more fully in the section below entitled Cookies and Other Data Technologies.
Categories of Personal Data Collected
Through the methods identified herein, we collect the following categories of personal data:
Identifiers
We collect basic contact information, such as name, address, phone number, mobile number, email address, date of birth, citizenship, and gender. For Bookings, we may require you to provide emergency contact information.
We also collect account information, such as your account name and number, your username and password, your Loyalty Program ID, and your accumulation and/or use of loyalty points.
We collect information about your government-issued identification, such as your driver’s license or other identification number, passport details, and visa information.
Commercial Data
We collect transaction information, such as details about your Bookings, Concierge Services, other products and Services you have purchased or considered, and your purchasing tendencies.
We collect financial information, such as name, bank account number, credit or debit card number, billing address, and payment history.
We may collect or create inferences, such as creating a consumer profile for you or a group of customers relating to consumer preferences and trends.
Personal Background
We collect certain protected class information, such as disability (e.g., when you request accommodations), and age. We may also collect race, national origin, marital status, sex, and age when such details are part of your government-issued identification or when we are required by law to collect them.
We collect employment information when you apply for a job with Company, including your contact information, government-issued identification, professional licenses and credentials, union membership, employment history, educational background, citizenship and immigration status, military service, and references.
Audio and Visual Data
We create and store certain call recordings. When you call our customer service agents, your call may be recorded or monitored for quality assurance purposes and/or for legal compliance.
For Bookings, we may require you to submit photographs of your government-issued identification (which may, in turn, include photographs of yourself) prior to check-in or as part of the check-in process.
We may collect audio and visual data from you if you upload it to the Website or App as part of your Content, or if you authorize us to use or share Content posted to your Third-Party social media account(s).
Health Data
We collect health data when you provide it to us, including when you request accommodation for a disability or request assistance securing medical treatment. When required to do so by local authorities, we may also collect vaccination records, test results, body temperature data, and other health data.
Communications
We collect any information you communicate to us, such as to customer service agents, or via a feedback form, regardless of whether it fits into one of the other categories of personal data outlined herein. Such information is volunteered by you and we do not collect it surreptitiously.
When you communicate with us via any live chat feature on our Website or App, your chat transcripts may be monitored or reviewed by the Third-Party live chat service provider.
We also collect information you communicate to Third Parties through the Website or App, including the contents of messages where we are not a recipient.
Geolocation
We collect general geolocation data from users of the Website or App by ascertaining approximate location (e.g., city or country) from the user’s IP address. We are generally aware of your location when you have checked in to one of our Properties. We do not collect or track precise geolocation data.
Children’s Information
While access to the Website and App is limited to users aged 18 and older (or the age of majority in the user’s jurisdiction, if different), we may collect children’s information from parents and guardians of minor Guests at the time of Booking or check-in. See below for additional information about children’s information.
Other Personalized Data
We may collect other personalized data on a case-by-case basis, but only when you expressly consent to the same before it is collected.
Non-Personalized Data
We collect device, internet, and network data, such as the type of device (e.g., computer, smartphone, tablet), device ID, MAC address, mobile carrier, phone number, operating system, IP address, internet service provider, browser language, browsing history, search history, advertising ID, and any other information regarding your interaction with the Website, App, or a Company advertisement. See below for more information about cookies and other tracking technologies.
We may collect or create aggregate information or de-identified data from the personal data collected. For example, we may combine the personal data of multiple users of the Website or App to create data that no longer identifies the users on an individual basis but speaks to behavioral or consuming patterns. If we combine aggregate information or de-identified data with personal data, we will treat it as personal data in accordance with the provisions of this Privacy Policy.
Our Use of Personal Data
We use personal data for the same reasons that we collect it. Specifically, we process personal data for the following purposes:
Categories of personal data
Purpose for Collection and Use
Legal Basis
Identifiers
Commercial Data
Communications
Geolocation Data
Non-Personalized
Data
We use this data for business purposes, including providing, improving, and securing the Website and App.
We process this data on the basis of our legitimate interest of maintaining a functional and secure Website and App (Article 6.1(f) GDPR).
Identifiers
Commercial Data
Communications
Audio or Visual Data
Health Data
Geolocation Data
Children’s Information
Non-Personalized
Data
We use this data for business purposes, including responding to pre-Booking communications by providing you with information regarding your requests about Bookings made via the Website, our call center, email, or other channels. We will only use this information to respond to your request.
We also use this data for commercial purposes, including marketing our offerings to you through email, phone, and SMS. Where you indicate your express and specific consent, we will use your contact details to send you newsletters and marketing communications via email or SMS about our products and Services that may interest you.
This processing is carried out to take steps at the request of the data subject prior to entering into a contract (Article 6.1(b) GDPR).
This processing is based on your consent, pursuant to Art. 6.1(a) GDPR.
Identifiers
Commercial Data
Personal Background
Health Data
Communications
Geolocation Data
Children’s Information
Non-Personalized
Data
We use this data for business purposes, including completing and handling your Booking, collecting payment from you, and providing all related Services.
We also use this data for the business purpose of complying with local regulatory requirements, such as ensuring you have the necessary travel documents and visas, where applicable.
We also use this data for the business purpose of addressing your special needs. During the Booking process, you may communicate data revealing information about your health or other preferences (for example, a request for a wheelchair accessible unit). While it is not mandatory to provide this data, if you do not provide it, we may be unable to accommodate your special needs.
We process this data on the basis of our contract with you (Article 6.1(b) GDPR).
We process this information to comply with regulatory requirements in the ports of call, therefore on the basis of an existing legal obligation (Article 6.1© GDPR).
We process this data only on the basis of your informed and specific consent (Art. 9.2(a) GDPR).
Identifiers
Commercial Data
Audio or Visual Data
Children’s Information
We use this data, including CCTV footage and other surveillance records, for the business purpose of providing security.
We also use this data for the business purposes of maintaining records of incidents, facilitating investigations and remedies, and preventing and detecting fraud.
We process this data on the basis of the need to ensure public security and to manage potential crisis situations (Article 6.1(d) GDPR).
We process this data on the basis of our legitimate interest of maintaining records of incidents and investigations. (Article 6.1(f) GDPR).
Identifiers
Commercial Data
Communications
We use this data for business purposes, including handling requests, complaints and comments. We keep track of the comments and complaints that you make so we can respond to your requests.
We also use this data for the business purpose of improving our Services.
We process this data in connection with our provision of Services to you, therefore on the basis of the Guest Agreement (Article 6.1(b) GDPR).
This processing is carried out on the basis of our legitimate interests of ensuring our guests are satisfied with the Services (Article 6.1(f) GDPR).
Identifiers
Commercial Data
Non-Personalized
Data
We use this data for business purposes, including managing our Loyalty Program and giving you credit for your Bookings and other activities that apply to your Loyalty Program account.
We also use this data for commercial purposes, including marketing Loyalty Program promotions to you.
We process this data in connection with our provision of Services to you, therefore on the basis of the Loyalty Program terms (Article 6.1(b) GDPR).
This processing is based on our legitimate interests in informing you of Loyalty Program promotions that we offer and that may enhance the value of your membership (Article 6.1(f) GDPR).
Audio or Visual Data
We use this data for business purposes, including to document commitments made by phone or live chat, and for quality assurance and training purposes. If the call is being recorded, you will be notified at the beginning of the call.
We also use this data for the business purpose of complying with regulatory requirements, such as where the recording of phone calls or consent is required by law.
The processing is based on the legitimate interest of the data controller.
The processing is carried out for compliance with a legal obligation to which the data controller is subject (Article 6.1© GDPR).
Identifiers
Commercial Data
Communications
Geolocation
Non-Personalized
Data
We use this data for business and commercial purposes, such as sending you personalized advertising communications and newsletters according to your preferences. If you submit any form or otherwise consent, whether via the Website, the App, online, on paper, in person, or through a Third Party, indicating you wish to receive information about our Properties, products and Services, we will contact you according to your preferences (e.g., email, phone, SMS/text) to inform you of our latest offers that we think might be of interest to you. See below for more information on personalized advertising and how to revoke consent.
We also use this data for the business and commercial purposes of sending you information about products and Services similar to your previous Bookings and other transactions. See below for more information on marketing communications and how to unsubscribe.
The processing is based on your specific consent (Article 6.1(a) GDPR).
This processing is based on our legitimate interests in informing you of similar or related products and Services that we offer and that may enhance your lodging experience (Article 6.1(f) GDPR).
Identifiers
Personal Background
Audio or Visual Data
Health Data
Communications
Geolocation
Non-Personalized
Data
We collect this data for business purposes, including receiving and reviewing applications for employment.
This processing is based on our legitimate interests in staffing our Company (Article 6.1(f) GDPR).
Our Use of Personal Data
Certain categories of personal data collected—such as Health Data, Children’s Information, financial account access information, protected class information, and some of your communications with Third Parties (e.g., email, text, or direct messages where we are not a recipient)—may qualify as “Sensitive Personal Data” under applicable law.
Limited Purposes
We only collect and use Sensitive Personal Data when reasonably necessary for and proportionate to one of the following business purposes: (a) to perform certain Services, such as verifying information or for analytics; (b) to verify or maintain the quality or safety of our Services, including our Website and App; © to perform Services reasonably expected by you; (d) for short-term use where there is no disclosure or profiling; and/or (e) to resist malicious, fraudulent, or illegal actions or to ensure physical safety.
Our Retention Policy for Sensitive Data
All other Sensitive Personal Data will be retained in compliance with any legislation governing the retention and deletion of such data. Unless otherwise required by law, Sensitive Personal Data will not be retained longer than two (2) years after fulfillment of the business purposes for which it was collected.
Data Security
We employ industry-standard security measures to protect the Sensitive Personal Data we collect, including encryption, access controls, and regular security assessments to prevent unauthorized access, disclosure, or alteration of the data.
Disclosure of Personal Data to Others
Service Providers and Contractors
Some Services that you obtain through us are provided by Third-Party service providers and contractors. For example, some Concierge Services may be provided by local tour guides that have been selected by Company for their knowledge and experience. We need to communicate your name to such partners in order to provide you with the Concierge Services you booked. Accordingly, such disclosure is for business purposes, including to provide you with Services that you have requested, and for commercial purposes, such as to advertise our Services to you and others.
These Third-Party service providers and contractors operate in several industries, including the following:
- Advertising (e.g., social media, web, streaming, and broadcast television platforms);
- Health and wellness providers (e.g., personal trainers, massage therapists, stylists, estheticians, acupuncture, and holistic practitioners);
- Payment processors (e.g., banks and other financial institutions that collect payments);
- Software and technology (e.g., providers of hosting, security, email, and live chat Services for the Website and App, and the provider of the Technogym technology in our fitness centers);
- Staffing agency employees (e.g., on-site housekeeping and other staff supplied by Third-Party staffing agencies who have a need to know personal data in order to fulfill your requests and perform their job responsibilities);
- Tourism (e.g., tour operators, local tour guides);
- Transportation Services (e.g., bus, train, airplane or other means of transportation depending on type of service required on a case-by-case basis).
When we provide your personal data to Third-Party service providers and contractors, we only communicate data that is strictly necessary. We also have agreements in place with our Third-Party service providers and contractors to ensure that the data we communicate to them is used only for specific purposes related to the fulfilment of your request.
Personal data of European residents may be transferred to a non-EU/EEA country if a specific Third-Party service provider or contractor is based outside the EU/EEA.
Legal Process and Protection
We may disclose information as necessary to comply with our legal obligations, such as to respond to government requests, law enforcement inquiries, legal processes, subpoenas, and court orders.
We may disclose information when we believe it is necessary to investigate, prevent, or respond to illegal, fraudulent, or injurious actions, property damage, or other security incidents that may cause harm to us, our Properties, guests, or others. We may also disclose information in good faith where necessary to investigate or enforce a violation of this Privacy Policy, our terms, or any legal rights.
Merger or Sale
We may share information with a buyer and/or its representatives for business purposes as part of a sale, merger, acquisition, or other change in control or entity status, either in whole or in part, of any company within the Company group. We reserve the right to transfer or assign your information as part of any such transaction or investigation.
Consent
We may disclose information to Third Parties as requested or consented to by you. Such disclosure may be for any business or commercial purpose as described by you.
Cookies and Other Data Technologies
Use of Data and Tracking Technologies and the Website and App
As with many companies, we may use cookies, pixels, gifs, web beacons, log files, and/or similar technologies to automatically collect certain information, including device, internet, and network data, general geolocation data, inferences, and aggregate information or de-identified data, when you use the Website or App or interact with our digital advertising content, such as when you click on an advertisement or a link to the Website within an email. This allows us to track individual users, determine when content is accessed, and customize user experiences.
Unless you have opted out of cookies or changed your cookie settings in your internet browser, your browser automatically sends us certain device, browser, internet connection, and general geolocation information and certain internet activity information. For instance, we may collect your mobile device identifier or MAC address, ISP carrier information, date and time you access the Service, the pages you visit, and whether you click on ads.
Cookies
Cookies are small text files sent by websites to users’ browsers for the purpose of automatic authentication, session tracking, and storing specific information regarding users. There are essentially three types of cookies used on the Website and/or App:
- Technical cookies: Required for navigation within the Website or App and to use some of its functions (e.g., timing the display of certain pages in so-called “pop-up” mode etc.).
- Statistical cookies: (e.g., Google Analytics) are supplied and managed by Google to provide a statistical analysis of access to the Website. The data collected is Non-Personalized Data, collected anonymously and in aggregate form, and no personal user data is retained. You can choose not to use Google Analytics cookies by following this link:
https://tools.google.com/dlpage/gaoptout?hl=en
- Profiling cookies: Supplied and managed by Third Parties to generate specific advertising messages based on browsing habits and the interests of individual users. These cookies do not use Sensitive Personal Data. The Website currently uses the Google Doubleclick cookie. For more information, including how to opt out, visit:
https://policies.google.com/technologies/ads?hl=en-GB
Please note that disabling cookies may impair the correct functioning of certain Website features.
Pixels
Pixels are small pieces of code embedded on a website that allow website owners and third parties to track user behavior and gather information about how users interact with the website. Pixels can track actions like page views, clicks, and other related activities and are often used for Personalized Ads and website analytics.
We may use pixels on the Website and App to associate personal data with your device or IP address and to track and measure your engagement with the Website, App, and Personalized Ads.
The Website and App utilize Meta Pixel, which allows us to track and analyze the effectiveness of our advertising campaigns on Facebook and Instagram. This pixel enables us to measure the success of our advertisements by understanding the actions users take on our Website or App after viewing our Facebook and Instagram ads. The data collected through the Meta Pixel may be used for marketing and analytical purposes to enhance our understanding of user preferences and to improve our advertising strategies. You can manage Meta Pixel data sharing settings within the Settings section of Facebook and Instagram.
The Website and App also utilize TikTok Ad Pixel, which allows us to track and analyze the effectiveness of our advertising campaigns on TikTok. The data collected through the TikTok Ad Pixel may be used for marketing and analytical purposes to enhance our understanding of user preferences and to improve our advertising strategies. You can manage TikTok Ad Pixel data sharing settings within the User Settings section of TikTok.
Marketing
Personalized Advertising
We may work with Third-Party advertising companies to process personal data (but not Sensitive Personal Data) for the commercial purpose of displaying ads tailored to your individual interests based on your online and transactional activity, and to provide ad-related services such as analytics and market research (collectively, “Personalized Ads”). Third parties, in turn, may use a cookie, web beacon, pixel, or other similar technology to collect personal data from you and/or associate it with other personal data collected.
We may also send you Personalized Ads in the form of email, phone, and SMS/text communications, as well as newsletters tailored to your preferences and purchasing tendencies.
Other Marketing Communications
When you provide your email address via the Website or App (e.g., when you register your account or create a Booking), you will receive emails about your account, Bookings, and related Services that may include non-personalized marketing messages.
Similarly, when you provide your phone number and consent to receive calls or SMS/text messages, you may receive non-personalized marketing communications.
Revoking Consent
To opt out of cross-device linking and Personalized Ads, visit www.aboutads.info/choices or perform a global opt-out on each browser and device.
You can opt out of receiving Personalized Ads and other marketing communications:
- By email – click the unsubscribe link and follow the instructions.
- By SMS/text message – reply STOP.
- By phone – request to be added to Company’s internal Do Not Call list.
- Through Third-Party platforms – such as Meta (Facebook, Instagram), Google, Android, and iOS by changing your user settings.
Please note that we may still contact you regarding your Bookings and other transactions, even after you have opted out of marketing communications. For example, if you unsubscribe from marketing emails and subsequently complete a Booking, we will still email you a receipt and instructions related to your Booking.
Sale of Personal Data
Company does not sell personal data.
As discussed above, the Company participates in targeted advertising or Personalized Ads, which is also called interest-based or online behavioral advertising and may include cross-contextual advertising. Under some privacy legislation, Personalized Ads may constitute the “sale” or “sharing” of personal data, such as for business purposes (e.g., providing Bookings and related Services) and commercial purposes (e.g., marketing).
To opt out of these practices, please see the section above about revoking consent or visit our Do Not Sell or Share My Personal Information page.
Financial Incentives
We may offer incentives related to the collection, retention, or sharing of information that may be deemed a “financial incentive” or “price or service difference.” If you opt in to such an offering pursuant to the terms described at the time of signup, we may collect information such as contact information, transactional information and inferences, internet or other network activity, and device information.
Any difference in price or rate, such as a discount, will be reasonably related to the value of the data. If you wish to withdraw from the offering, please contact us as instructed below.
Our Data Policy Regarding Children’s Information
Compliance with COPPA
Company’s privacy practices and this Privacy Policy are designed to comply with the Children’s Online Privacy Protection Act (COPPA) and related laws governing the collection, use, disclosure, and retention of the personal data of children. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent.
Parental Consent and Control
As detailed in this Privacy Policy, we collect limited information about minor guests during the Booking and/or check-in process. However, we do not collect personal data directly from children. Instead, we collect Children’s Information when the Lead Guest provides it directly to us. For example, our Website and App are not directed to children and only users who are the age of majority may use the Website or App or create Bookings.
We never collect Children’s Information before obtaining verifiable parental consent. We obtain parental consent when a parent accepts and agrees to the terms of this Privacy Policy and/or when a parent voluntarily communicates information about the child to us, such as when speaking with our customer service agents. To the extent we process Children’s Information, we do so for the purposes described in the consent request and to provide the requested Services.
Data Collected
As detailed above in this Privacy Policy, we collect certain data about minor passengers in order to provide our Bookings and related Services to them and their parents and to maintain security at our Properties. The categories of personal data collected include:
- Identifiers — specifically, contact information (name and age of child and parent’s contact and account information) and, where applicable, government-issued identification;
- Personal Background — specifically, protected class information communicated to us by the parent regarding the child, such as disability accommodations the child may require; Audio or Visual Data — specifically, CCTV footage captured featuring the child;
- Health Data — specifically, health data expressly communicated by the parent to us, such as the child’s disability; and
- Communications — specifically, information the parent voluntarily communicates to us or Third Parties about the child.
Purpose of Data Collection
Children’s Information is collected and used for business purposes — specifically, the business purposes identified in this Privacy Policy in the section entitled “Our Use of Personal Data,” where Children’s Information is included as one of the categories of personal data collected.
Importantly, Children’s Information is only collected and used for business purposes. Our use of Children’s Information is limited to what is necessary to supply the specific Services for which the data was collected. We do not use Children’s Information for commercial purposes or in conjunction with Personalized Ads.
Data Security Measures
We have implemented industry-standard security measures to protect the confidentiality, security, and integrity of the Children’s Information collected, stored, and processed.
Third-Party Disclosure
Children’s Information is disclosed to Third Parties identified in this Privacy Policy in the section entitled “Disclosure of Personal Data to Others.” Our disclosure of Children’s Information to Third Parties is limited to what is necessary to fulfill the business purpose for which the data was collected.
COPPA Rights
Parents have the right to review, delete, or refuse further collection of their child’s personal information, unless we are legally required to collect and maintain records of the same. See the section below entitled “Your Privacy Rights” for the procedures for exercising these rights.
Contact Information
If you have reason to believe that we have collected personal data from someone under 16 years of age in connection with our Services without adequate involvement from the child’s parent or guardian, please let us know by contacting us via the methods described below in the section entitled “Contact Us.”
Protection of Personal Data
Consistent with others in our industry, we take efforts to employ technical, administrative, and physical security measures for personal data, taking into account reasonable security procedures and accessible technology. However, no system can be completely secure; and we cannot promise, and you should not expect, that your personal data will always remain secure. Your provision of personal data is at your own risk. The safety and security of your information also depends on you. Take steps to safeguard your passwords and other data and notify us as soon as possible if you believe your account security has been breached.
Tracking and Privacy Controls
Our Website does not currently respond to Do Not Track, or “DNT” requests. DNT is a feature that, when enabled, sends a signal to websites to request that your browsing not be tracked.
“GPC” is short for Global Privacy Control settings in your browser or extension. Our Website recognizes GPC signals. This means that if your browser has GPC enabled, our Website will automatically recognize your GPC signal and opt you out of the sale of your personal information, if any. For more information about GPC, please click here: https://globalprivacycontrol.org/.
Your Privacy Rights
Company is committed to giving you the appropriate control of your own personal data. Dependent upon the laws of the jurisdiction where you reside, you may have the following rights in connection to your personal data:
- The right to access your personal data and obtain specific information about how we process it. Please be aware that you can only exercise this right in relation to your own data or to the data of a minor or another vulnerable person, where you have provided such data as a holder of parental authority or legal responsibility. Company reserves the right to ask for proof of identity, as well as to refuse to provide the personal data if the identity or relevant connection to the data subject cannot be proven.
- The right to rectify your personal data, including by means of providing a supplementary statement.
- The right to obtain the erasure/deletion of personal data concerning you, subject to certain legal limitations depending upon the laws of your jurisdiction of residence.
- The right to limit or restrict the processing of your personal data, in particular, any Sensitive Personal Data and the use of automated decision making, such as profiling.
- The right to data portability. You may exercise this right in cases where the processing is based on your consent or on your contractual relationship with Company and the processing is carried out by automated means.
- The right to object, at any time, to the processing of the personal data concerning you. You may exercise this right where the processing is based on the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or where the processing is based on our legitimate interests.
- The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you. You may exercise this right unless the processing is necessary for entering into, or performance of, a contract between you and Company, or is authorized by applicable law that lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or if the processing is based on your explicit consent.
- The right to opt-out of certain data practices, such as by unsubscribing from marketing communications by following the opt-out instructions in each message or by contacting us as outlined in this Privacy Policy.
- The right to lodge a complaint with a supervisory authority in your jurisdiction of residence, place of work or place of the alleged infringement. Similarly, you have the right not to be discriminated against for asserting your privacy rights, and your exercise of these rights will have no adverse effect on the price and quality of our goods or Services.
- Other Rights. If certain other privacy laws apply to you that provide you with additional rights, please contact us to make a request, as we strive to comply with all privacy rights.
To exercise your data subject rights, please email us at info@privatevillasmexico.com.
Jurisdiction-Specific Rights
In addition to the foregoing Privacy Rights, if you are a resident of any of the following jurisdictions within the United States, the corresponding privacy rights apply to you:
For California Residents
The “right to access your personal data” includes the right to request the following:
- what personal data we have collected, used, disclosed and “sold” about you, including the categories of personal data;
- the categories of sources from which the personal data is collected;
- the business or commercial purpose(s) for collecting, selling, or sharing personal data;
- the categories of Third Parties to which personal data is disclosed; and
- the specific pieces of personal data we have collected about you.
Please note that we are only required to honor “right to access” requests twice in a 12-month period.
The “right to rectify your personal data” includes the right to correct inaccuracies, considering the nature of the personal data and the purposes of the processing.
The “right to obtain erasure/deletion of your personal data” is not absolute and we will, in some cases, retain personal data as allowed by applicable laws and to support essential functionality, such as maintaining your subscription.
You may also designate an authorized agent to make a privacy rights request on your behalf. In addition, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we may have “sold” or “shared” about you. For the 12-month period prior to the date of this Privacy Policy, Company has only sold or shared personal data about its customers as expressly described in this Privacy Policy.
The Shine the Light law permits you to request and obtain from us, once per calendar year, information about any of your personal data shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us as described below in the section entitled “Contact Us.”
For Virginia, Colorado, Connecticut, and Utah Residents
The “right to access your personal data” means you have the right to confirm whether we process your personal data and access your personal data.
Please note that we are only required to honor “right to access” requests twice in a 12-month period.
The “right to rectify your personal data” includes the right to correct inaccuracies, considering the nature of the personal data and the purposes of the processing.
The “right to obtain erasure/deletion of your personal data” is not absolute and we will, in some cases, retain personal data as allowed by applicable laws and to support essential functionality, such as maintaining your subscription.
You have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, and/or profiling in furtherance of decisions that produce legal or similarly significant effects. Please see our Do Not Sell or Share My Personal Information page for information on exercising this right.
Please note that we do not process your personal data using machine learning and/or profiling methods in ways that would impact you in a legal or similarly significant manner. If we deny your privacy request, you have the right to appeal our decision. To appeal a decision we have made regarding your request, you may contact us as instructed below. We will respond to appeals within 45 days.
You may also designate an authorized agent to make a privacy rights request on your behalf.
Updates
We reserve the right to update, modify, add or remove portions of this information notice at any time. Significant changes to the processing of your personal data will require your approval, in accordance with the applicable legislation. If you would like to obtain a copy of the current or a previous version of the information notice, please contact us using our contact details provided below.