Data Protection & Privacy Policy

Casa Lana is committed to protecting your privacy and handling your personal data responsibly and transparently. This policy explains how we collect, use, store, and protect your personal information when you make a booking, contact us, or stay with us.

1. Who We Are

Casa Lana provides short- and long-stay accommodation in the UK. For the purposes of data protection law, we are the data controller of your personal information.

2. What Personal Data We Collect

We may collect and process the following information: Name,  Email address,  Telephone number Billing address,  Booking details (dates, number of guests, length of stay),  Identification details (where required for verification or compliance),  Payment-related information (processed securely via third-party providers),Communications with us (emails, messages, enquiries).We do not collect unnecessary personal data.

3. How We Use Your Data

We use your personal data to: Manage and confirm bookings Communicate before, during, and after your stay.  Verify identity where required Process payments and refunds Comply with legal, safety, and regulatory requirements Improve our services and guest experience.  We only use your data where there is a lawful basis to do so.

4. Lawful Basis for Processing

We process your data under one or more of the following lawful bases:

Contract – to manage your booking and stay

Legal obligation – to meet regulatory or safety requirements

Legitimate interests – to manage our business and provide good service

Consent – where you have opted in to receive communications

5. Sharing Your Data

We only share your data where necessary, including with: Payment providers,  Booking and property management systems, IT and security providers,  Legal or regulatory bodies (where required by law).  We never sell your personal data to third parties.

6. Data Storage & Security

Your data is: Stored securely Accessed only by authorised persons Protected using appropriate technical and organisational measures.  We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to meet legal requirements.

7. Your Rights Under UK GDPR, you have the right to:

Access your personal data Request correction of inaccurate data Request deletion of your data (where applicable)

Object to or restrict processing Request data portability Withdraw consent at any time (where consent is the basis)

To exercise your rights, please contact us using the details below.

8. Cookies & Website Use

If you use our website, basic cookies may be used to ensure functionality and improve performance. We do not use cookies to collect unnecessary personal data. A separate Cookie Policy may apply.

9. Third-Party Platforms

If you book via third-party platforms (e.g. Airbnb or Booking.com), their privacy policies also apply. We are only responsible for data we control directly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in law or our practices. The most recent version will always be available on our website.

11. Contact Us If you have any questions about this policy or how your data is handled, please contact us at:

Email: hello.casalana@gmail.com

Property: Casa Lana, Horley, Surrey