Privacy Policy | Golviana

1. What this notice covers

Golviana is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Golviana, from browsing ratings to submitting a room request.

2. What we collect through the service

Delivering accurate lodging information, verified reviews, and dependable enquiry handling requires us to process the following categories:

Identity and contact details: Full name, form of address, preferred language, region of residence, email address, and any telephone number you supply when registering or submitting an enquiry.
Stay preferences and requirements: Dates of travel, room configuration and category, bedding selection, dietary and accessibility requests, and loyalty programme identifiers.
Billing verification records: The cardholder's name, masked card identifiers, billing location, and confirmation tokens issued by certified payment intermediaries. Complete card numbers never reach Golviana systems.
Technical and device data: Internet protocol address, browser and operating system version, referring URLs, regional time zone, device identifiers, and page interaction times.

3. Lawful bases and purposes

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Enquiry fulfilment: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Editorial personalisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Security and verification: Safeguarding digital infrastructure, validating the legitimacy of transactions, and shielding users from unauthorised profile access.
Service messages: Sending enquiry updates, confirmations, itinerary reminders, and necessary customer service notices.
Statutory adherence: Fulfilling financial disclosure rules, tax obligations, and other legal mandates that apply to our operations.

4. Who receives your information

We do not sell, rent, or lease personal identifiers to unconnected commercial parties. Transfers happen only under contractual safeguards, and only to the following categories of recipient:

The hotels themselves: Resorts receive the guest name, dates, and accommodation specifics strictly necessary to respond to a request or honour a reservation.
Payment processors: Encrypted billing data passes to certified financial gateways operating to current PCI-DSS validation standards.
Hosting and cloud services: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Courts and regulators: Disclosure may follow a valid legal demand, court order, or regulatory mandate, or be necessary to protect someone's vital interests.

5. Digital identifiers and measurement

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Security and retention

Protection is layered across administrative, technical, and physical measures: encrypted transport under TLS 1.3, AES-256 encryption at rest, isolated database clusters, and credentials restricted by role.

Retention lasts no longer than the enquiry, any related correspondence, audit obligations, or a statutory holding period demand. At expiry, records are erased permanently or anonymised irrevocably.

7. Rights and choices available to you

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Right of access: Request a transferable copy of your stored records and verify our handling procedures.
Correction: Have inaccurate, incomplete, or outdated details corrected without undue delay.
Erasure: Request deletion of your records where we no longer have a legal reason to retain them.
Restriction: Pause processing activity while a record's accuracy or our legitimate interest is under review.

Opt-out and your choices

How your personal information is gathered and used remains under your control. Subject to your location and the applicable legislation, you may exercise these opt-outs:

Sale or sharing of personal information: Under the CCPA/CPRA and equivalent statutes elsewhere, you may refuse the sale or sharing of your personal information with third parties. Although we do not sell personal information in the traditional sense, limited data may reach trusted partners so that we can provide or improve our services.
Cookie controls: You can manage or refuse cookies and tracking technologies through your browser settings, or through the cookie consent tools provided on this site.
Marketing communications: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Withdrawal of consent: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Updates to this document

Golviana may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.