Privacy Policy

Last updated: 1 January 1970

We only ask for the details we need in order to answer your question and help you plan your time in Santorini.

Internal note (pre-launch): this document is a structured draft. All placeholders below must be completed and the full text reviewed by a qualified legal advisor before public launch.

Who We Are

This website is operated by [LEGAL ENTITY NAME] ("BY SANTORINIANS", "we", "us"), registered at [REGISTERED ADDRESS], [COMPANY DETAILS]. We act as the data controller for the personal information described in this policy.

You can contact us about privacy at ask@bysantorinians.com.

Information We Collect

Information you give us: first name, email address, and optionally your WhatsApp number, travel dates and the content of your question or message.

Information collected automatically: basic technical data such as device type, browser and approximate location derived from your IP address, and — only with your consent — analytics data about how you use this website.

Why We Collect Your Information

To reply to you, to give relevant recommendations, and — only if you ask us to — to arrange a booking or service with an independent local provider.

How We Use Your Information

We use your details to respond to your request, to keep a record of our correspondence, to coordinate with a provider where you have asked us to arrange something, and to improve the quality of our service.

We do not sell your personal data.

Legal Basis for Processing

Depending on the situation we rely on: your consent (for optional communications, analytics and marketing cookies), the performance of steps taken at your request (responding to your enquiry or arranging a service), our legitimate interests (running and improving the service securely) and legal obligations where applicable.

WhatsApp Communications

If you choose to contact us on WhatsApp, or give us your WhatsApp number so we can reply there, your message and number are processed within WhatsApp under its own terms and privacy policy. Using WhatsApp is always optional — email works just as well.

Service Providers

We use a small number of processors to operate this site and communicate with you, such as website hosting, email delivery and messaging services. Where we help arrange a service, your relevant details are shared with the independent provider concerned. A current list of processors can be requested at any time. [COMPANY DETAILS]

Analytics and Cookies

Necessary cookies keep the site working and remember your cookie choice. Analytics and marketing cookies only run after you consent, and you can change your choice at any time. See our Cookie Policy.

Data Retention

We keep enquiry correspondence only for as long as needed to help you and to keep a reasonable business record, after which it is deleted. [COMPANY DETAILS — final retention periods to be confirmed.]

International Data Transfers

Some of our providers may process data outside the European Economic Area. Where that happens we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Your GDPR Rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You can also lodge a complaint with your local supervisory authority.

To exercise any of these rights, email ask@bysantorinians.com.

Data Security

We use reasonable technical and organisational measures to protect your information and limit access to the people who need it in order to help you.

Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS] — ask@bysantorinians.com

Questions in the meantime: ask@bysantorinians.com.