Privacy Policy

1. Data controller

The controller of personal data collected through this website is ALECK INVESTMENT, operating in Watamu, Kenya. To exercise your rights or for any privacy-related request please contact us at info@aleckvillas.com or by phone at +254 701 31 38 87.

2. Data we collect

We collect personal data you provide directly when filling out site forms (information requests, bookings, contact) and technical data automatically collected by the browser when you visit the site (cookies, IP address, browser type, pages visited).

• Contact data: first name, last name, email, phone (when voluntarily provided).
• Request data: message, check-in/check-out dates, number of guests (for booking requests).
• Navigation data: IP address, user agent, referrer page, language, necessary and — with your consent — analytics cookies.

3. Purpose of processing

• Respond to information requests and manage bookings.
• Ensure technical operation and security of the website.
• With your consent, gather anonymous usage statistics to improve the site.
• Comply with legal obligations (e.g. accounting, tax).

4. Legal basis

Processing is based on (a) consent (art. 6.1.a GDPR) for non-necessary cookies and contact; (b) pre-contractual measures (art. 6.1.b) for booking requests; (c) legitimate interest (art. 6.1.f) for site security; (d) legal obligation (art. 6.1.c) for retention of accounting records.

5. Data retention

Contact data from inquiries are retained for 24 months from the last contact. Data from confirmed bookings are retained for the period required by tax obligations (10 years). Technical logs are retained for 30 days. Cookies have variable lifespans as detailed in the Cookie Policy.

6. Data recipients

Your data is neither shared nor sold to third parties. It may be communicated to technical providers acting as Data Processors (hosting, transactional email, optional booking platforms like Airbnb if you choose to use them) and to entities required by law (authorities).

7. Transfer outside the EU

Data may be stored on servers located in Italy (Artera hosting). Any third-party service (Google Analytics, Airbnb) may process data in non-EU countries: in such cases we ensure adequate safeguards are in place (Standard Contractual Clauses).

8. Your rights

At any time you can exercise the rights provided by articles 15-22 of the GDPR:

• Access to your data;
• Rectification of inaccurate data;
• Erasure (right to be forgotten);
• Restriction of processing;
• Data portability;
• Objection to processing;
• Withdraw consent at any time;
• Lodge a complaint with the supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).

To exercise any of these rights please write to info@aleckvillas.com.

9. Security

We take appropriate technical and organisational measures to protect your data (HTTPS, ISO 27001 hosting, access control, encrypted backups). No system is 100% secure but we do our best to minimise risks.

10. Changes

This Privacy Policy may be updated at any time. The date of the latest revision is shown at the top of the page. Please check it periodically.

← Back to home