This Privacy Policy explains how Premium Living ("CHV", "we", "us", "our") collects, uses, shares, and protects personal data when you visit our website and when you contact us or make a reservation (including via third-party booking channels).
Personal Data We Collect
Depending on how you interact with us, we may collect:
- Contact and enquiry data: name, email address, telephone number, and the content of your enquiry
- Booking and stay data: booking dates, property, number of guests, special requests, communications with us, and information necessary to provide guest support
- Operational data: information related to property access, maintenance issues reported, and service delivery (for example, housekeeping or extras requested)
- Technical data: IP address, device/browser information, and website usage data (mainly for security and performance)
- Payment-related data: where payments are processed by third parties, we may receive booking and payment confirmations or references (we do not typically store full card details)
How We Use Your Data
We may use personal data to:
- respond to enquiries and communicate with you
- administer reservations and provide guest support
- provide services you request and manage operational matters during your stay
- maintain website security, prevent fraud, and protect our business and properties
- comply with legal, tax, and accounting obligations
- handle disputes, complaints, or damage claims where relevant
Legal Basis for Processing
Where applicable under the GDPR, we process personal data on one or more of the following legal bases:
- Contract: to manage and perform your reservation and services requested
- Legal obligation: to meet legal, tax, and regulatory requirements
- Legitimate interests: to operate our business, protect our properties, prevent fraud, and improve services
- Consent: where required (for example, certain non-essential cookies or marketing communications)
You may withdraw consent at any time where processing is based on consent.
Who We Share Your Data With
We share personal data only when necessary and proportionate, including with:
- Your.Rentals (property management platform): processes booking data, guest details, and payment information on our behalf to manage reservations and guest communication
- Google Analytics (Google Ireland Limited): collects anonymised website usage data to help us understand how visitors interact with our site. Only active when you consent to analytics cookies. See Google's Privacy Policy
- Service providers: supporting our operations (for example, website hosting, IT support, communications providers)
- Operational teams: involved in delivering your stay, limited to the information required to perform their tasks
- Authorities, insurers, or professional advisers: where required by law or necessary to establish, exercise, or defend legal claims
Cookies
We use cookies and similar technologies to support website functionality. When you first visit our site, a cookie banner lets you choose which categories to accept. You can change your preferences at any time via the "Cookie Settings" link in the footer.
| Category |
Purpose |
Provider |
Retention |
| Necessary |
Cookie consent preference (localStorage). Always active; cannot be disabled. |
First party |
Persistent (until cleared by user) |
| Analytics |
Anonymised website usage statistics (pageviews, sessions, traffic sources) to help us improve the site. |
Google Analytics (Google Ireland Limited) |
Up to 14 months |
Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy. Specific retention periods:
- Contact form enquiries: 2 years from the date of your last enquiry, unless a booking or contract follows
- Booking and guest data: 6 years after the end of your stay, to comply with tax and accounting obligations under Cyprus law
- Analytics data: 14 months (Google Analytics default retention). Anonymised and aggregated data may be kept longer
- Cookie consent preference: stored in your browser until you clear it or change your settings via "Cookie Settings" in the footer
- Legal and dispute records: as long as required to establish, exercise, or defend legal claims
Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal data
- request correction of inaccurate or incomplete data
- request deletion of your data (where applicable)
- request restriction of processing (in certain circumstances)
- object to processing (in certain circumstances)
- request data portability (where applicable)
- withdraw consent at any time (where processing is based on consent)
To exercise your rights, please contact us using the details in the Legal Notice. We may need to verify your identity before processing requests.
Withdrawing cookie consent: You can change or withdraw your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of any page. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
Security
We take reasonable administrative and technical measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International Transfers
If any service providers process personal data outside the European Economic Area, we will apply appropriate safeguards as required by law.