Privacy

Privacy Policy

Last updated: 22 October 2026 (WhatsApp provider added)

This policy explains what information we collect when you visit our website, book a stay, or message us (including on WhatsApp), why we collect it, and what you can ask us to do with it. We keep it short and only collect what we need to look after your stay.

Who we are

We are the "data controller" for the information described here, under the EU General Data Protection Regulation (GDPR) and Greek law.

What we collect

• Booking and enquiry details: your name, email address, phone number, dates of stay, number of guests, room choice and any message you send us.
• Messages: what you write to us through the chat on our website, by email, by phone or on WhatsApp, including your WhatsApp name and phone number.
• Details we must keep by law: information Greek law requires accommodation providers to record about guests, and the details needed for invoices and receipts.
• Technical data: basic information your browser sends when you load our pages (such as your IP address), handled by our hosting provider to deliver the website securely. We do not use advertising or tracking cookies.

How we use it

• To answer your questions and handle your booking request (to take steps you asked for before a contract, and to perform the booking).
• To prepare for your arrival and look after you during your stay (performance of the booking).
• To meet our tax, accounting and guest-registration duties (legal obligation).
• To keep our website and booking calendar working and secure, and to avoid double bookings (our legitimate interest).

We do not sell your information, and we do not use it for advertising.

Automated replies (website chat and WhatsApp)

To answer quickly, day and night, our website chat and our WhatsApp number may reply using an AI assistant (Claude, made by Anthropic). When you message us this way, the text of your messages is sent to Anthropic to generate the reply. The assistant answers questions about the rooms, availability and the area. It does not make final decisions about you: every booking is confirmed by a member of our team, and you can always ask to speak to a person.

Who we share it with

Only with the services we need to run the business, each of which processes the data on our behalf or as required to deliver its service:

• Netlify — hosts our website and booking functions.
• Supabase — stores our booking calendar and booking requests.
• Google (Gmail) — delivers booking notifications and emails.
• Anthropic — generates the automated chat and WhatsApp replies described above.
• Meta (WhatsApp) — carries the WhatsApp messages you exchange with us.
• Kapso — connects our WhatsApp number to our systems, so your WhatsApp messages and our replies pass through it.
• Booking platforms such as Booking.com or Airbnb, if you booked through them, and our channel manager that keeps availability in sync.
• Public authorities, our accountant and tax services, when the law requires it.

Some of these providers are based outside the European Economic Area (for example in the United States). Where that happens, the transfer is protected by the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

• Bookings, invoices and guest records: for as long as Greek tax and accommodation law requires.
• Enquiries and messages that did not lead to a stay: up to 12 months, then deleted.
• Chat and WhatsApp conversations: up to 12 months after your last message, unless they are part of a booking record.

Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong;
• delete your information (unless the law requires us to keep it);
• restrict or object to how we use it, or send it to you in a portable format.

Just email retroluxuryrooms@gmail.com. We reply within one month. If you are unhappy with how we handle your information, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).

How to delete your data

To have your messages and details deleted, including your WhatsApp conversations with us:

• email retroluxuryrooms@gmail.com with the subject "Delete my data", or
• send us the message "Delete my data" on WhatsApp.

Tell us the name and phone number or email you used. We will delete everything we are not legally required to keep within 30 days and confirm by reply.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top.