Privacy policy

Data we collect

• Booking: first and last name, email address, phone, stay dates and number of guests.
• Payment: card payments are handled by our provider Stripe. Card numbers are never sent to or stored by this website.
• Contact: the messages you send us (email, form).

Why we use it

• Manage your booking and stay.
• Take payment and manage the security deposit.
• Issue your invoice and meet our accounting obligations.
• Answer your requests and send you information about your stay.

Legal bases: performance of your booking (contract), compliance with our legal obligations (accounting, tax) and our legitimate interest in ensuring the stay runs smoothly.

Who we share it with

• Stripe, for secure card payment processing.
• Our hosting provider (OVH), for hosting the site and delivering emails.

Your data is never sold, transferred or shared with third parties for commercial purposes.

How long we keep it

Booking data is kept for the duration of the stay and then for the legal retention period for accounting records (invoices: 10 years). Simple enquiries without a booking are deleted shortly after.

Cookies and statistics

This site uses no advertising cookies or third-party trackers. Only a technical cookie, strictly necessary for operation (booking form, security), may be set. Our traffic statistics are anonymous, cookie-free and do not retain your IP address: no consent banner is therefore required.

Your rights

Under the GDPR, you have the following rights over your data:

• Access: obtain a copy of the data concerning you.
• Rectification: correct inaccurate information.
• Erasure: request the deletion of your data (subject to legal retention obligations).
• Objection and restriction: object to processing or request its restriction.

To exercise these rights, write to us at valerie@gaffory.ovh.

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).