Privacy Policy

1. Who We Are

TuscanyHolidays.co.uk ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website, make a booking, or communicate with us.

For any questions about this policy or your personal data, please contact us at hello@tuscanyholidays.co.uk.

2. Data We Collect

We may collect and process the following personal data:

• Identity data: name, title, date of birth.
• Contact data: email address, telephone number, postal address.
• Booking data: travel dates, party size, villa preferences, special requests.
• Financial data: payment card details (processed securely via our payment provider — we do not store full card numbers).
• Technical data: IP address, browser type and version, device information, time zone, operating system.
• Usage data: pages visited, links clicked, browsing patterns on our website.
• Communication data: the content of emails, enquiry forms, and other correspondence with us.

3. How We Collect Your Data

We collect personal data through:

• Direct interactions — when you make a booking, submit an enquiry form, subscribe to our newsletter, or correspond with us by email.
• Automated technologies — when you browse our website, we may automatically collect technical and usage data through cookies, server logs, and similar technologies.
• Third parties — we may receive data from analytics providers (such as Google Analytics), payment providers, and villa owners or property managers.

4. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your villa booking, including communicating with villa owners and service providers on your behalf.
• To respond to your enquiries and provide customer support.
• To send you booking confirmations, travel documents, and pre-arrival information.
• To process payments and prevent fraud.
• To send marketing communications (only where you have given consent or where we have a legitimate interest, and always with an option to unsubscribe).
• To improve our website, services, and customer experience through analytics.
• To comply with legal and regulatory obligations.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: processing is necessary to perform our contract with you (e.g. processing a booking).
• Legitimate interests: processing is necessary for our legitimate business interests (e.g. improving our services, fraud prevention), provided these do not override your rights.
• Consent: where you have given clear consent for us to process your data for a specific purpose (e.g. marketing emails).
• Legal obligation: processing is necessary to comply with a legal requirement.

6. Data Sharing

We may share your personal data with:

• Villa owners and property managers — to facilitate your booking and stay.
• Service providers — such as payment processors, email platforms, and IT support, who act on our instructions.
• Concierge and experience providers — where you have requested additional services (e.g. private chefs, transfers, wine tours).
• Legal and regulatory bodies — where required by law or to protect our legal rights.

We do not sell your personal data to third parties. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place.

7. Cookies

Our website uses cookies and similar technologies to distinguish you from other users, improve your browsing experience, and analyse website traffic. You can manage your cookie preferences through your browser settings. For more detail, please refer to our cookie notice displayed on the website.

Types of cookies we use:

• Strictly necessary cookies — required for the website to function (e.g. session management).
• Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics).
• Functionality cookies — remember your preferences and personalise your experience.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Booking data is typically retained for six years after the completion of your stay, in line with contractual and tax obligations.

Marketing data is retained until you unsubscribe or ask us to delete it. Website analytics data is typically anonymised and aggregated.

9. Your Rights

Under UK data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data in certain circumstances.
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Portability — request transfer of your data to another organisation.
• Objection — object to processing based on legitimate interests or direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at hello@tuscanyholidays.co.uk. We will respond within one month.

10. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, secure payment processing, and restricted access to personal data within our team.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact & Complaints

If you have any questions, concerns, or complaints about how we handle your data, please contact us at hello@tuscanyholidays.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been breached.