Privacy Policy

Last updated: 9 April 2026

We take your privacy seriously and do our best to make sure your data is kept safe. This notice explains what personal information we collect when you use begurvillas.com, enquire about or book one of our villas, or correspond with us, and what we do with it.

1. Who we are

The data controller for personal information collected through this website and in connection with bookings at Villa Begur and Villa Sa Riera is:

Sa Riera Ltd
Company number: 09198583
Registered address: Shaw Well, Gracious Lane End, Sevenoaks, Kent, TN14 6HR, United Kingdom
Email: [email protected]

Sa Riera Ltd acts as the rental agent for both properties. Villa Begur is owned by Peter and Claudia Blandford. Villa Sa Riera is owned by Shaw Well Ltd (company number 09132204, registered at Shaw Well, Gracious Lane End, Sevenoaks, Kent, TN14 6HR, United Kingdom).

If you have any questions about this notice or want to exercise your rights, please contact us at [email protected].

2. What personal data we collect

Depending on how you interact with us, we may collect:

Contact details — your name, email address, phone number, and country of residence.
Booking details — the villa booked, arrival and departure dates, number and names of guests, special requests, and any correspondence about your stay.
Payment information — handled directly by our payment processor (Stripe) and by Lodgify, our booking platform. We receive transaction confirmations but do not store full card details on our systems.
Identification data for guest registration — for stays in Catalunya, Spanish law requires us to record identity details for every guest (including a scan or photograph of a valid passport or national ID). This data is collected through a secure form on Lodgify and submitted to the Spanish authorities via our local agency, Casa Care, as described below.
Website usage data — your IP address, browser type, pages visited, referring site, and similar technical information, collected through cookies and Google Analytics. See our Cookie Policy for details.
Newsletter subscription — if you sign up for our blog or newsletter, your email address and any preferences you provide.

We do not collect special category data (such as health or religious information) unless you volunteer it in a specific request (for example, telling us about a dietary requirement or mobility need), and in that case we only use it to help with your stay.

3. Where we get your data from

We collect data directly from you when you enquire, book, fill in a form on this website, send us an email, subscribe to the newsletter, or provide guest details for the Catalunya guest register. We also collect technical data automatically through cookies and analytics when you visit the site.

4. Why we use your data and our legal basis

We only use your data for specific purposes, each with a legal basis under Article 6 of the UK GDPR and EU GDPR:

To process enquiries and bookings — legal basis: performance of a contract.
To communicate with you before, during, and after your stay — legal basis: performance of a contract and our legitimate interests in running a holiday rental business.
To take payment and handle refunds — legal basis: performance of a contract.
To submit guest identity details to the Spanish authorities under the Registro de Viajeros (Real Decreto 933/2021 and successor regulations) — legal basis: compliance with a legal obligation.
To keep accounting, tax, and anti-money-laundering records — legal basis: compliance with a legal obligation.
To operate and improve this website — legal basis: your consent (for analytics and non-essential cookies) and our legitimate interests (for strictly necessary cookies and site security).
To send you our newsletter or blog updates — legal basis: your consent, which you can withdraw at any time by clicking "unsubscribe" in any email.

5. Who we share your data with

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary:

Lodgify — our booking platform and website host. Lodgify processes enquiries, bookings, guest messaging, and the guest registration form on our behalf.
PriceLabs — we use PriceLabs to help set nightly rates. PriceLabs receives booking calendar data but does not receive guest names or contact details.
Stripe — our payment processor, which handles card transactions directly.
Google (Ireland and the United States) — we use Google Analytics to understand how visitors use this website, Google Workspace for business email, and from time to time Google Ads to promote our villas on Google search and partner sites. We do not display third-party advertising on this website. Analytics data is pseudonymised, and any Google Ads conversion-tracking data relates only to the effectiveness of our own marketing.
Casa Care — our local agency in Begur, who provide cleaning, guest assistance, and submit guest identity details to the Spanish authorities for the Registro de Viajeros on our behalf.
Other local agents and service providers in Begur — who may receive your name and arrival details in order to welcome you, hand over keys, or respond to issues during your stay.
Spanish authorities (Mossos d'Esquadra / Ministerio del Interior) — we are legally required to submit guest identity details to the Spanish national police registration system.
Our accountants and professional advisers — who may receive limited booking and payment information to prepare accounts and tax returns.
Mailchimp (Intuit Inc.) — if you have subscribed, your email address is held on their system to deliver our blog updates.
Courts, regulators, or law enforcement — where we are required by law to disclose information.

All third parties we use are bound by contractual or legal obligations to protect your data and to use it only for the purposes we specify.

6. International transfers

Sa Riera Ltd is a company incorporated in the United Kingdom. The villas themselves are located in Spain, and some of our service providers (such as Casa Care) are based in Spain. Several of our processors (including Lodgify, Google, and our payment processor) may store or process data in the European Economic Area, the United Kingdom, or the United States.

Transfers between the UK and the EEA are covered by the UK–EU Adequacy Decision. Transfers to the United States are covered either by the EU–US Data Privacy Framework, the UK Extension to that framework, or by Standard Contractual Clauses, depending on the provider.

7. How long we keep your data

Booking records and correspondence — retained for 6 years after the end of the relevant tax year, in line with UK and Spanish accounting and tax requirements.
Guest identity data submitted to the Registro de Viajeros — automatically removed from our booking platform (Lodgify) a short period after the end of your stay, in line with Lodgify's data retention policy. We do not hold copies outside of Lodgify. The Spanish authorities retain their own records of the submitted data in accordance with Spanish law.
Newsletter subscription data — held until you unsubscribe, after which we remove your email address from our active list.
Website analytics data — retained in Google Analytics for 14 months.
General enquiries that do not lead to a booking — deleted within 12 months unless we have a reason to keep them longer.

8. Your rights

Under the UK GDPR and EU GDPR, you have the right to:

Ask for a copy of the personal data we hold about you;
Ask us to correct inaccurate data;
Ask us to delete your data, where we no longer have a lawful reason to keep it;
Object to or restrict certain types of processing;
Withdraw consent, where we are relying on consent (for example, for the newsletter or non-essential cookies);
Receive your data in a portable format;
Lodge a complaint with a supervisory authority.

To exercise any of these rights, please email [email protected]. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you. Our pricing is informed by PriceLabs' dynamic pricing recommendations, but final prices are reviewed and set by us, and pricing does not depend on individual guest profiles.

10. Security

We take reasonable technical and organisational measures to protect your personal data against loss, unauthorised access, and misuse. Our website is served over HTTPS, access to booking systems is restricted to authorised staff, and we require our processors to maintain appropriate security standards.

11. Changes to this policy

We may update this privacy notice from time to time. When we do, we will change the "last updated" date at the top of this page. If the changes are significant, we will let you know more prominently.

12. Contact us

If you have any questions about this notice or about how we handle your personal data, please email [email protected].