Privacy Policy

Last updated: 1 November 2026

This is the Privacy Notice of The Villa GRP Limited, registered in Cyprus under number HE329539, trading as The Villa Group, whose registered office is 1 Nikou Kazantzaki, Paphos, 8035, Cyprus. Where this Privacy Notice refers to “The Villa Group”, “we”, “us” or “our”, it is referring to The Villa GRP Limited. This Privacy Notice sets out how we collect and process your personal data in relation to the brand known as The Villa Group. It also provides certain information that is legally required and lists your rights in relation to your personal data. Please read this Privacy Notice to understand how we may use your personal data.

Collection of your personal information

The personal data we collect depends on how you interact with us, the websites you use and the choices you make. We collect and process personal data about you with your consent and/or as necessary to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests.

Information you provide directly

Bookings. If you book a property through us, we will collect the personal information you provide to us, such as your name, email address, postal address, phone number and other information you give us. Bookings and online payments are handled through the booking panel provided by our booking system supplier, SuperControl. Your booking details are held in SuperControl, our booking system, which stores them on our behalf. Card details entered in that panel are not entered on or stored by our website. If you elect to pay us by credit card by another route, we may also collect credit card numbers and other payment information.

Enquiries. If you complete a form on our website, we collect the details you enter. Depending on the form, this may include your name, email address, telephone number, message, travel or wedding dates, number of guests, booking reference, and details of a villa you own or are interested in. We also record whether you have ticked the box consenting to follow-up marketing material. Ticking that box is optional.

Information collected automatically

If you accept analytics cookies, Google Analytics collects information about how our website is used. Our website and its service providers also process technical information, such as your IP address and browser type, in order to deliver pages securely. Our Cookies Policy gives more detail.

Use of your personal data

The Villa Group uses your personal data for the purposes described in this Privacy Notice or otherwise disclosed to you. For example, we use your personal data to:

  • facilitate booking self-catering accommodation and other services;
  • provide and deliver services, including securing, troubleshooting, improving and personalising those services;
  • operate and improve our websites and business, including our internal operations and security systems;
  • process your transactions;
  • provide customer service and respond to your questions and enquiries;
  • perform research and analysis aimed at improving our products, services and technologies;
  • send you information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages; and
  • where permitted, communicate with you about new products, offers, promotions, rewards, contests, upcoming events and other news about our products and those of our selected partners. The Choice and preference section below explains how to change your preferences.

Location of personal data

Personal data collected by The Villa Group is stored and processed in Cyprus and in other countries where our service providers maintain facilities, which may include the United Kingdom and the United States. Where data is transferred outside the UK or European Economic Area, we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses.

Sharing of your personal data

Except as disclosed in this Privacy Notice, The Villa Group does not share your personal data with any outside parties.

We share personal data with your consent or as necessary to complete your transactions or provide the products or services you have requested or authorised.

We may share your personal data with service providers who perform services on our behalf, such as processing payments, storing data, hosting websites, fulfilling orders, assisting with direct marketing, and conducting audits. Those companies may obtain only the personal data they need to provide the service. They are required to keep it confidential and are prohibited from using it for any other purpose. The Villa Group maintains contracts with these third parties requiring their treatment of personal data to be consistent with our obligations under the law.

The main service providers for our website are:

  • SuperControl (booking system and payments);
  • Supabase (website data storage);
  • Cloudflare (website hosting and security);
  • Resend (delivering website enquiries to us by email);
  • Microsoft 365 (our email, including enquiries and messages you send us); and
  • Google (Google Analytics, if you accept analytics cookies, and Google Maps).

To manage your booking, we use the information you provide to deliver our products and services. This includes booking holiday accommodation, tours, transportation, car hire and weddings, and issuing booking documentation. We share the details needed with the villa owner or other supplier concerned.

We reserve the right to disclose your personal data if we have a good-faith understanding that we are required to do so by law (including to meet national security or law enforcement requirements), or in the good-faith belief that such action is reasonably necessary to comply with legal process, respond to claims, or protect the rights, property or safety of our company, employees, customers or the public.

Retention of personal data

We keep booking records for as long as needed for our accounts, tax and legal obligations, and to help with any later questions about your stay. We regularly review how long we keep personal data.

Personal data relating to marketing is stored for 8 years from your last interaction with us. Enquiries that do not lead to a booking, and that are not kept for marketing with your consent, are stored for 2 years from our last contact with you.

Accessing your personal data

If you would like to review or revise the information you previously provided to us, you may ask us for this information at any time by writing to privacy@thevillagroup.co.uk. You can expect a response from us within 30 days.

Choice and preference

The Villa Group respects your right to make choices about the use and disclosure of your personal data. Subject to applicable law, you have the right to:

  • request access to, and rectification or erasure of, your personal data;
  • restrict or object to our processing of your personal data, including for direct marketing;
  • receive a copy of your personal data in a usable and portable format, where processing is automated and based on your consent or a contract with you;
  • withdraw your consent at any time for future processing, where processing is based on your consent; and
  • complain to a data protection authority. In Cyprus, this is the Commissioner for Personal Data Protection. In the United Kingdom, it is the Information Commissioner’s Office.

You can change your choice about analytics cookies at any time using the Cookie settings link at the bottom of every page.

Security of your personal data

The security of your personal data is important to us. We take appropriate and reasonable steps designed to help protect your personal data from unauthorised access, use, disclosure, alteration and destruction. For instance, information sent to and from our website is encrypted in transit. No method of transmission over the internet, or method of electronic storage, is 100% secure. Therefore, while we strive to protect your personal data, we cannot guarantee its absolute security.

Changes to this Privacy Notice

We reserve the right to change this Privacy Notice at any time when necessary to reflect changes in our products, how we process personal data or applicable law. When we make changes, we will revise the “last updated” date at the top of this notice. If there are material changes, we will provide notice or obtain consent as may be required by law. We encourage you to review this notice whenever you visit one of our sites.

Privacy contact

Our privacy team can be contacted by email at privacy@thevillagroup.co.uk.

Contact information

If you wish to correct your personal data held by us, opt out at any time from receiving marketing correspondence from us or alter your marketing preferences, please email sales@thevillagroup.co.uk.

If you have a privacy concern, complaint or question, you can contact The Villa Group by email at privacy@thevillagroup.co.uk, by phone on +357 99052960, or by post at Attn: Privacy, The Villa Group, 1 Nikou Kazantzaki, Paphos, 8035, Cyprus.