Privacy policy
Last updated: 27 September 2026
This policy explains what personal data we collect when you use hiddenvoyage.com or contact us, why we use it, who we share it with and the rights you have. We collect only what we need to answer you and to arrange your stay.
1. Who is responsible for your data
The data controller is Hidden Voyage Ltd, registered in England and Wales, company number 08629374, registered office 14th Floor, 33 Cavendish Square, London W1G 0PW, United Kingdom. For any question about your data, write to ask@hiddenvoyage.com.
2. What we collect
- Enquiries and bookings: name, email, telephone, country of residence, the villas you are interested in, dates, number of guests and children, budget, occasion and anything you choose to tell us in your message.
- Wedding enquiries: in addition, the date or period, number of guests, type of ceremony, budget and preferred venue.
- Hotel and owner enquiries: name, email, telephone, company, role, property location, number of rooms, project stage and the services you are interested in.
- Bookings: the names of the members of your party, arrival details and payment information needed to confirm the stay. Card payments are handled by the payment provider; we do not store card numbers.
- Use of the website: pages visited, device and browser type, approximate location and the campaign that brought you to us. Analytics and advertising cookies are used only with your consent; see the cookie policy.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Answering your enquiry and checking availability and price with owners | Steps taken at your request before a contract |
| Confirming and managing your booking and your stay | Performance of a contract |
| Accounting, tax and legal records | Legal obligation |
| Following up an enquiry we have not yet answered in full, preventing fraud, improving our service | Legitimate interests |
| Website analytics and advertising measurement (Google Analytics, Meta Pixel) | Consent, which you can withdraw at any time |
| Newsletters and offers, if you ask to receive them | Consent |
4. Who we share it with
- Owners and property managers of the villas and hotels you ask about, only as needed to check availability and to prepare your stay.
- Wedding partners such as venues, planners and suppliers, only for wedding enquiries and only as needed.
- Service providers who process data on our behalf: Google (email and analytics), HubSpot (customer relationship management), SiteGround (website hosting), Meta (advertising measurement, with consent) and our payment and accounting providers.
- Authorities and advisers when required by law, or to our professional advisers under a duty of confidentiality.
We do not sell your personal data.
5. Transfers outside the UK
Some providers store data outside the United Kingdom, for example in the European Union or the United States, and the villas are in Italy. When data leaves the UK we rely on adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum and, where applicable, the UK Extension to the EU US Data Privacy Framework.
6. How long we keep it
- Enquiries that do not become a booking: up to 24 months from our last contact.
- Bookings and the related correspondence and invoices: 6 years from the end of the financial year of the stay, as required for tax and accounting purposes.
- Analytics data: up to 14 months.
7. Your rights
You have the right to access your data, to correct it, to have it erased, to restrict or object to its use, to data portability and to withdraw consent at any time without affecting earlier processing. To exercise any of these rights, write to ask@hiddenvoyage.com. We reply within one month.
If you are not satisfied with our answer, you may complain to the Information Commissioner's Office (ico.org.uk). If you live in the European Union, you may also contact the data protection authority of your country.
8. Security
The website uses an encrypted connection. Access to enquiries and bookings is limited to the people who need it to serve you, and our providers are bound by data processing agreements.
9. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version.