Privacy Policy

Effective date: 29 October 2026

1. Who is responsible for your information

Luxury Villas in Lefkada (https://luxuryvillasinlefkada.com/) is operated by MR Group IKE, Lefkada 0, 31100, Lefkadas, Greece. MR Group IKE is the controller of personal information processed for this website.

For privacy questions, access or deletion requests, contact info@luxuryvillasinlefkada.com, or write to the address above, identifying Luxury Villas in Lefkada in your message.

Luxury Villas in Lefkada is a travel and accommodation discovery guide supporting Villas Katsiki. VillasKatsiki.com is the official accommodation website for villa details and booking inquiries. PortoKatsikiVillas.com is a companion travel guide. This policy covers Luxury Villas in Lefkada; when you follow links to either companion website, consult the privacy information provided there. This website does not take reservations or payments.

2. Information we collect and why

Messages you choose to send. If you email us, we receive your email address, name if provided, message and any information or attachments you include. We use this information to respond to editorial, business or privacy requests and keep appropriate correspondence records. Our legal basis is our legitimate interest in managing correspondence and operating the guide (GDPR Article 6(1)(f)); where you ask us to take steps toward a contract, Article 6(1)(b) may apply. We process legally required records and rights requests under Article 6(1)(c). Please do not send payment-card details or unnecessary sensitive information.

Technical and security information. Our hosting and security systems process information such as IP address, request time, requested page, browser information and security events to deliver the site, diagnose faults, prevent abuse and protect information. Our legal basis is our legitimate interest in a secure, reliable website (Article 6(1)(f)). Some information may be needed to comply with legal obligations.

Optional website analytics. If you consent, Google Analytics 4 (GA4) helps us understand visits and improve the usefulness of our guides. It processes identifiers stored in analytics cookies, page views, referral information, browser and device characteristics, language and approximate geographic information. Your IP address is used by Google's collection infrastructure to derive geographic information; Google states that GA4 does not log or store individual IP addresses. We do not intentionally send your emails, inquiry text or payment details to Analytics. The legal basis for optional analytics is consent (Article 6(1)(a)). Advertising consent and Google signals are not enabled by this consent configuration.

The published Contact page directs accommodation inquiries to VillasKatsiki.com and general inquiries to our email address. It does not submit an accommodation form on this website. Public comments and visitor account registration are not offered as part of the current guide.

3. Cookies and your choices

Essential technologies support security, delivery and your privacy choice. These remain available when you reject analytics. Our consent preference is saved in your browser's local storage for 180 days, unless you clear it sooner. It records your choice and its expiry; it is not an advertising identifier.

Google Analytics is optional. Before you accept it, its tag is not loaded and no analytics requests, including cookieless analytics pings, are sent by this configuration. Accept enables analytics, Reject leaves it off, and Preferences lets you select your choice. Closing the notice without choosing does not give consent.

After acceptance, GA4 uses first-party cookies such as _ga and _ga_TVMTP41LNT to distinguish browsers and maintain session information. The configuration limits their lifetime to 180 days; later permitted activity may renew their expiry. Cookie lifetime and Google's server-side data retention are different.

Use Cookie preferences, available on every page, to change or withdraw consent. Turn off analytics and save. This stops further analytics collection by this configuration, removes its analytics cookies and reloads the page to stop the previously loaded library. Withdrawal does not affect processing that lawfully occurred before it. It also does not, by itself, delete historical Analytics records; contact us if you wish to request erasure. Rejecting or withdrawing analytics does not prevent reading guides or following accommodation inquiry links.

You can also clear cookies and local storage or control them in your browser. Clearing the saved preference causes the site to ask again. Privacy choices on other websites, including VillasKatsiki.com and PortoKatsikiVillas.com, are managed separately.

4. Hostinger Reach and marketing

Hostinger Reach is installed but is not connected to a Reach account, and no Reach subscription forms were identified on the published pages. We do not currently offer Reach newsletter subscriptions on this website. Its unused visitor script is disabled. We do not treat visiting the guide or making an inquiry as consent to marketing. If we later introduce a newsletter or other marketing service, we will provide the relevant information and obtain any required consent before activating it.

5. Service providers, recipients and external resources

We use Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus, for website hosting and related infrastructure. Our general contact mailbox, info@luxuryvillasinlefkada.com, uses Hostinger Business Email, which processes and stores messages and attachments sent to that address. No mailbox forwarder is currently configured in the Hostinger account. We use Google Analytics for consented measurement and Wordfence (Defiant, Inc.) for website security. These providers may process information on our behalf under their applicable service and data-processing terms; some also process limited information for their own security or legal responsibilities.

Some photographs are delivered from external image servers, including Unsplash. Requesting these images necessarily discloses technical connection information, such as your IP address and browser request details, to the image host. Links to other websites do not mean that their privacy practices are controlled by this guide.

Information is available to authorised personnel and service providers who need it for the purposes described. We may disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal information.

Provider information:

6. International processing

Our providers and their subprocessors may process information outside Greece or the European Economic Area, including in the United States. Where GDPR requires safeguards for a transfer, the applicable provider arrangements use a lawful transfer mechanism, such as an adequacy decision or European Commission standard contractual clauses, with supplementary safeguards where required. Contact us for information about the safeguards relevant to your data. Consent to analytics does not remove these transfer requirements.

7. Retention

Correspondence. We retain messages for the period needed to handle the request and related follow-up, legal obligations or disputes. The period depends on the subject of the correspondence, whether the matter remains open and whether a record is needed for a legal claim or obligation. Contact us to request deletion of information that is no longer needed.

Security and hosting logs. Wordfence is configured to record security-related traffic only, with a maximum of 2,000 Live Traffic entries and a 30-day limit. This limit applies to that Wordfence log, not to every record held by our hosting or security providers. Hosting access/error logs and provider-side security records follow the provider's operational and legal retention arrangements. Specific incident evidence may need to be preserved longer to investigate abuse or establish, exercise or defend a legal claim.

Backups. Our scheduled WordPress backups retain four weekly file backups and fourteen daily database backups. Hostinger also maintains its weekly hosting backup rotation. Separately protected manual recovery copies do not expire automatically and remain until manually reviewed and removed. Backup copies are used for recovery rather than ordinary processing. If deleted information is restored from a backup, the applicable deletion request must be applied again before that information returns to ordinary use.

The GA4 property currently retains event-level data for 2 months and user-level data for 14 months. The user retention period resets on new activity. These settings do not determine the retention of most aggregated standard reports. The browser consent preference and analytics cookie lifetime are 180 days, as explained above.

8. Your rights

Subject to the conditions and exceptions in GDPR, you may request access to your personal information, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. You may object to direct marketing at any time. We do not use the guide's data to make solely automated decisions producing legal or similarly significant effects on you.

Send requests to info@luxuryvillasinlefkada.com. Explain the request and provide enough information to locate the relevant records. We may ask for proportionate information to verify identity; please do not send identity documents unless specifically requested through an appropriate channel. We normally respond within one month. If an extension is permitted because of complexity or the number of requests, we will explain this within that first month. Some information must be retained to comply with law or protect legal claims.

You may complain to the Hellenic Data Protection Authority (https://www.dpa.gr/en), or the supervisory authority in the EEA country where you live, work or where the alleged infringement occurred.

9. Changes

We will update this policy when the website's processing changes. Material changes to optional processing will be explained before a new choice is requested where necessary. The effective date at the top of this policy identifies its latest revision.