Privacy policy

1. Who is responsible for your information

Cannes Holiday Apartments is the controller of the personal information described in this notice. If you have a privacy question or wish to exercise any of your rights, please use our contact form.

2. Information we collect

Depending on how you use the website and whether a booking proceeds, we may collect:

• Contact details, including your name, email address and telephone number.
• Enquiry and stay details, including the apartment or event you are interested in, arrival and departure dates, number of guests, pet information, questions, preferences and messages.
• Booking and payment administration, including agreed prices, correspondence, invoices, payment status and information needed to manage check-in, the stay and any issue arising from it. We do not collect card details through this website.
• Technical and usage information, such as approximate location, IP address, browser and device type, pages viewed, referring page and interactions with the website.
• Communications sent by email, through our forms or by another method you choose to use.

3. How we use your information

We use personal information to:

• respond to questions and recommend a suitable apartment;
• check availability, provide a quotation and take steps towards a booking;
• confirm and administer bookings, payments, arrivals and stays;
• send service messages and keep an appropriate record of our correspondence;
• maintain availability records and prevent conflicting bookings;
• operate, secure, troubleshoot and improve the website and our service; and
• meet accounting, tax, legal and regulatory obligations and establish or defend legal claims.

We do not sell personal information. We do not use enquiry or booking information for unrelated email marketing unless we have asked separately and you have chosen to receive it.

4. Our lawful bases

Under applicable data protection law, we rely on one or more of the following grounds:

• Contract and steps before a contract, when you ask for a quotation or make and manage a booking.
• Legitimate interests, in responding to enquiries, running and protecting a small accommodation business, maintaining accurate availability, improving the website and keeping proportionate business records.
• Legal obligations, including tax, accounting and lawful requests from public authorities.
• Consent, where we specifically ask for it. You may withdraw consent at any time, although this will not affect processing already carried out lawfully.

5. Forms, email and booking records

Information submitted through the contact form is stored in our website administration system and sent to us by email so that we can reply. Booking requests are also stored as private WordPress records and may be linked to internal availability records. Our email system may retain delivery and diagnostic logs. Only authorised administrators and service providers supporting the website or email delivery should have access to these records.

Please do not include passports, payment-card details, medical information or other sensitive information in a general enquiry unless we have specifically asked for it through an appropriate method.

6. Cookies and analytics

The website may use essential cookies needed for security, administration and form functionality. Logged-in website administrators also receive WordPress authentication and preference cookies.

We use Google Analytics 4 (measurement ID G-GXGJX4VZKX) to understand, in aggregate, how visitors find and use the site. Google Analytics may place or read cookies and receive technical information about your browser, device and use of the website. This information helps us measure visits and improve content; it is not used by us to identify you by name. You can restrict or delete cookies through your browser settings. Blocking analytics cookies should not prevent the essential parts of the website from working. Read Google’s privacy policy.

7. Maps and external services

Property pages use map data and tiles supplied by OpenStreetMap and supporting content-delivery services. When a map loads, those providers may receive technical information such as your IP address, browser details and the page requesting the map. Links to other websites are governed by the privacy notices of those websites.

Our enquiry and booking-request forms use Cloudflare Turnstile to distinguish genuine visitors from automated submissions. When the security check runs, Cloudflare may receive technical information such as your IP address, browser and device details, and interaction data needed to provide the service. See Cloudflare’s privacy policy.

8. Who we share information with

We share information only where reasonably necessary, including with:

• website hosting, maintenance, form, analytics and email-delivery providers;
• payment providers and banks where a booking proceeds;
• people who help us prepare or manage an apartment where they need relevant information;
• professional advisers, insurers, accountants or legal representatives; and
• public authorities or other parties where disclosure is required by law or necessary to protect legal rights.

Our service providers act under their own legal obligations or are required to handle information only for the services they provide to us.

9. International transfers

Some technology providers may process information outside the United Kingdom or European Economic Area. Where data protection law requires it, we rely on an adequacy decision, approved contractual protections or another lawful safeguard. You may contact us for more information about safeguards relevant to your information.

10. How long we keep information

We keep information only for as long as it is reasonably needed for the purpose for which it was collected:

• general enquiries and unsuccessful booking requests are normally reviewed for deletion or anonymisation within 24 months of the last meaningful contact;
• confirmed booking, payment and accounting records may normally be retained for up to six years, or longer where required by applicable law or an unresolved claim;
• technical, security and email-delivery logs are kept for shorter operational periods where practical; and
• backup copies may remain until they are overwritten through the normal backup cycle.

11. Security

We use reasonable technical and organisational measures to protect personal information, including restricted administration access, software updates, backups and protected email delivery. No method of transmission or storage is completely secure, so please contact us promptly if you believe information relating to you has been compromised.

12. Your rights

Depending on the law that applies to you, you may have rights to request access to your personal information, correction, deletion, restriction, portability or an objection to particular uses. Where processing is based on consent, you may withdraw that consent. These rights are not absolute and we may need to retain information where there is a legal requirement or another lawful reason.

To make a request, please use our contact form and state that your message concerns privacy. We may ask for enough information to verify your identity. You also have the right to complain to the data-protection authority where you live or work. In the United Kingdom this is the Information Commissioner’s Office; in France it is the CNIL.

13. Changes to this notice

We may update this notice when our website, services or legal obligations change. The date at the top shows when it was last revised. Material changes will be highlighted where appropriate.

---

Questions about your information? Contact us and state that your message concerns privacy. We will respond personally.