Privacy Policy

Effective date: August 2026

1. Who we are

Fragoulishome (“we”, “us”, “our”) operates the website fragoulishome.gr and offers self-catered maisonettes for short-term rental in Petras, Sitia, Crete, Greece.

Contact email: fragoulishome@gmail.com

2. What data we collect

We collect the following categories of personal data:

  • Booking information: Name, email address, phone number, check-in/out dates, number of guests, and any special requests you provide when making a reservation.
  • Payment information: Payment card details are processed by Stripe, Inc. We do not store full card numbers on our servers. Stripe’s privacy policy applies to the payment transaction.
  • Technical data: IP address, browser type and version, device type, operating system, referring URL, and pages visited on our site (collected through cookies and similar technologies).
  • Communication data: Any information you provide when contacting us via email or the contact form.

3. How we collect your data

We collect data when you:

  • Fill in the booking form on our website.
  • Contact us via email.
  • Browse or interact with our site (via cookies and analytics tools).
  • Complete a payment through Stripe.

4. Why we process your data (legal basis)

  • Contract performance: To process and manage your booking, communicate with you about your stay, and handle payments.
  • Legitimate interest: To improve our website, monitor usage patterns, and prevent fraud.
  • Consent: To store non-essential cookies (analytics, marketing) and send marketing communications (if you opt in).
  • Legal obligation: To retain booking and financial records as required by Greek and EU tax law.

5. Cookies

Our site uses cookies to function properly and, with your consent, to analyse traffic and improve your experience. You can manage your cookie preferences through the cookie banner displayed on your first visit and at any time by clearing your browser cookies.

Necessary cookies (always active): Session cookies, CSRF tokens, and booking-related cookies that enable core site functionality.

Analytics cookies (optional): Help us understand how visitors interact with our site — which pages are visited, how long users stay, and what links they click. We use this data to improve the site.

Marketing cookies (optional): Used to deliver relevant advertisements and measure campaign effectiveness.

You can withdraw your consent at any time by rejecting cookies via the banner or adjusting your browser settings. Disabling certain cookies may affect site functionality.

6. How we store and protect your data

Your data is stored securely on Supabase (PostgreSQL) and Stripe servers, both of which implement industry-standard encryption and security practices. We retain booking data for the duration required by Greek tax law (currently 5 years) and for legitimate business purposes thereafter. Payment data is handled exclusively by Stripe and is subject to their privacy policy.

7. Who we share your data with

We do not sell your personal data. We may share your data with the following third parties strictly for operational purposes:

  • Stripe — payment processing (card details never reach our servers).
  • Supabase — database hosting and authentication.
  • Vercel — web hosting and CDN.
  • Analytics providers — only if you consent to analytics cookies.

8. Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

  • Right of access — request a copy of the data we hold about you.
  • Right to rectification — correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal retention requirements.
  • Right to restrict processing — limit how we use your data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interest or for direct marketing.
  • Right to withdraw consent — withdraw cookie or marketing consent at any time.

To exercise any of these rights, please contact us at fragoulishome@gmail.com. We will respond within 30 days.

9. Data transfers outside the EU

Our service providers (Stripe, Vercel, Supabase) may process data in countries outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

11. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: fragoulishome@gmail.com
Address: Petras, Sitia, Crete 723 00, Greece