Privacy policy

Who we are

This website is run by Bleverde, a private estate of two holiday villas, Villa Elia and Villa Levanda, in Gavalochori, Chania 73008, Crete, Greece. We are licensed by the Greek Ministry of Tourism (MHTE 1042Κ13000529900). We decide how and why your personal information is used, which makes us its “controller” under data-protection law.

You can reach us about anything in this policy at info@bleverde.com, or on WhatsApp at +41 79 600 11 64.

What we collect, and why

When you visit the website

Like any website, ours receives your IP address, your browser type and the pages you request. Our web server and our security software use this to deliver the pages, keep the site secure and block attacks. We do this because we have a legitimate interest in running a safe, working website.

When you contact us

If you email us or message us on WhatsApp, we receive your name, your contact details and whatever you write, such as your travel dates and the number of guests. We use it to answer you and to prepare an offer or a stay. We do this at your request, before any booking is made.

When you book

Bookings are made through our booking system, provided by Lodgify, at bleverde.lodgify.com. There you give the lead guest’s name, contact details, the number of guests, your dates and your payment. Payments are handled by Lodgify’s payment providers; we do not see or store your full card details.

We use your booking information to manage your stay: confirming it, arranging your arrival, the welcome basket, cleaning and anything you ask for. We need it to perform our contract with you. We also keep the records that Greek tax, accounting and tourism rules require us to keep.

Our guest guide

During your stay you can open our online guest guide with the personal link we send you, or with your booking number and surname. If you use the booking number, we check it with Lodgify to confirm that your stay is current. We record when the guide is opened, with a shortened IP address, so that we can spot a link being passed on and protect the access details it contains.

What we don’t do

• We don’t sell or rent your personal information to anyone.
• We don’t send newsletters or marketing emails.
• We don’t use analytics or advertising cookies unless you accept them in our cookie banner.
• We don’t use your information for automated decision-making or profiling.

Cookies

Cookies are small files that a website stores in your browser. This website itself sets only these cookies for visitors:

Cookie	What it does	How long
pll_language	Remembers whether you chose English or French, so the site keeps showing your language.	1 year
wpconsent_preferences	Remembers the choice you made in our cookie banner, so we don’t ask again on every page.	180 days
jbv_ga_access	Only for guests who open our guest guide: lets your device reopen it during your stay without the link. It holds no personal details.	Until the day after your departure

They are needed for the site to work as you asked, so they don’t need your consent. WordPress sets further cookies only for the site’s administrators when they log in. The third-party services listed below may set their own cookies.

Your cookie choices

When you first visit, a cookie banner asks whether we may use statistics cookies (to see how visitors use the site) and marketing cookies (to measure our advertising, and to show embedded Google Maps). Nothing in those categories is used until you accept. You can accept all, reject all, or choose by category, and change your mind at any time with the cookie button at the bottom of every page. Your choice is kept for 180 days, then we ask again.

Third-party services on this website

Some parts of the site are provided by other companies. When a page uses one of them, your browser connects to that company, which then receives your IP address and technical information about your browser.

Service	Where and why	Privacy policy
Lodgify	Our booking system, when you check availability or book.	lodgify.com
Google Tag Manager	Loads our measurement tags on every page. It sets no cookies itself. The Google tags it contains (Google Analytics, Google Ads) wait for your choice in the cookie banner: until you accept, Google receives only basic signals without cookies, such as that a page was viewed.	policies.google.com
Google Maps	The location maps on the home page and the villas page. They load only after you accept marketing cookies; Google may then set cookies.	policies.google.com
Tripadvisor	The rating widget on the reviews page.	tripadvisor.com
hCaptcha	Spam and bot protection. It sets a short-lived security cookie (__cf_bm, 30 minutes).	hcaptcha.com
Facebook, Instagram, WhatsApp	Only if you click our links to them, or message us on WhatsApp.	meta.com

Some of these companies process information outside the European Economic Area and Switzerland, including in the United States. Where they do, they rely on recognised safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Who else sees your information

Besides the services above, we share your information only when we have to:

• the companies that host our website and our email, which process it on our behalf;
• our accountant, for the records the law requires;
• public authorities, where Greek law requires us to report guest or tax information.

How long we keep it

• Messages and enquiries: for as long as we need them to answer you and to plan your stay.
• Booking and accounting records: for as long as Greek tax and accounting law requires.
• Guest guide: your stay’s name, dates and link until we delete the stay; the record of openings keeps only the latest 200 events.
• Security logs: for a short period, then they are deleted automatically.

Your rights

Under the EU General Data Protection Regulation (GDPR), and the Swiss Federal Act on Data Protection where it applies, you have the right to:

• see the personal information we hold about you, and get a copy of it;
• have it corrected if it is wrong, or deleted if we no longer need it;
• restrict how we use it, or object to our using it;
• receive it in a portable format;
• withdraw your consent at any time, wherever we rely on it.

To use any of these rights, email info@bleverde.com. We will reply within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or to the data-protection authority where you live.

Children

This website is not aimed at children, and bookings must be made by an adult. We don’t knowingly collect information from children, except the names and ages of children travelling with you, when you give them for your booking.

Security

The website is served over an encrypted connection (HTTPS) and protected by security software. We keep access to your information to the people who need it to look after your stay.

Changes to this policy

We will update this page if the way we handle personal information changes, for example if we add a new service to the website. The date at the top shows when it last changed.