Privacy Policy | Andrileta

1. Scope of this notice

Andrileta publishes hospitality reviews and passes reservation enquiries to properties. Guarding personal data and explaining our handling of it clearly is an obligation we hold across all reader touchpoints.

Below we explain the categories Andrileta gathers, the purposes they serve, the parties they may reach, and the safeguards applied — whether you are reading rankings, creating a profile, or sending a stay enquiry.

2. Information we collect

The following categories are collected so that we can provide accurate availability, verified editorial assessments, and reliable confirmations:

Who you are and how to reach you: Full name, form of address, preferred language, region of residence, email address, and any telephone number you supply when registering or submitting an enquiry.
Stay preferences and requirements: Dates of travel, room configuration and category, bedding selection, dietary and accessibility requests, and loyalty programme identifiers.
Payment verification data: Cardholder name, truncated card indicators, billing address, and transaction confirmation tokens handled by accredited payment processors. Full card numbers are never stored on Andrileta servers.
Technical and device data: Your IP address, browser build, operating system, the page that referred you, time zone setting, device identifiers, and timestamps for page interactions.

3. Lawful bases and purposes

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Enquiry fulfilment: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Content customisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Fraud prevention and security: Defending the platform's infrastructure, checking that submissions are genuine, and protecting profiles from unauthorised access.
Operational communication: Delivering enquiry acknowledgements, booking references, travel reminders, and critical service messages.
Meeting legal obligations: Satisfying accounting disclosure, tax reporting, and other duties imposed by the jurisdictions in which we operate.

4. Who receives your information

We do not sell, rent, or lease personal identifiers to unconnected commercial parties. Transfers happen only under contractual safeguards, and only to the following categories of recipient:

Partner properties: Selected properties are given only the name, arrival dates, and room details required to answer an enquiry or hold a room.
Accredited payment intermediaries: Billing information travels encrypted to accredited payment gateways that maintain current PCI-DSS validation.
Hosting and cloud services: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Courts and regulators: Information may be released where a lawful subpoena, court order, or official mandate requires it, or to protect vital interests.

5. Digital identifiers and measurement

Cookies and browser storage let us recognise repeat visitors, remember currency and layout preferences, evaluate site performance, and preserve session integrity. You retain complete control through your browser, but switching off essential cookies degrades enquiry functionality.

6. Security and retention

Protection is layered across administrative, technical, and physical measures: encrypted transport under TLS 1.3, AES-256 encryption at rest, isolated database clusters, and credentials restricted by role.

Records are held only as long as needed to complete an enquiry, resolve a question, satisfy audit requirements, or meet a statutory retention period. Once that period ends, records are permanently erased or irreversibly anonymised.

7. Rights and choices available to you

Subject to verification of your identity and the law in your jurisdiction, you may exercise the following:

Access and inspection: Obtain a portable copy of the personal records we hold and confirm how they are being handled.
Correction: Request prompt correction of profile information that is wrong, partial, or out of date.
Right to erasure: Ask for records to be deleted where no statutory or contractual basis for keeping them remains.
Right to restrict processing: Restrict our use of your data during any dispute over accuracy or over our grounds for processing.

Opt-out and your choices

Control over the collection and use of your personal information rests with you. Where local law provides for it, the following choices apply:

Sharing and sale of your data: Under the CCPA/CPRA and equivalent statutes elsewhere, you may refuse the sale or sharing of your personal information with third parties. Although we do not sell personal information in the traditional sense, limited data may reach trusted partners so that we can provide or improve our services.
Cookies and tracking: Use your browser's settings, or the consent tool on this site, to manage or reject cookies and other tracking technologies.
Promotional email: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Consent withdrawal: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

To exercise any of these rights, or to make an opt-out request, please contact us at [email protected] or use our contact form.

8. Revisions

Andrileta may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.