Privacy Policy
What we collect, why, the legal basis for it, and your rights.
Draft · Effective 5 July 2026
Who we are
Vrelo Collection ("we", "us") runs this website and the direct-booking and concierge services offered through it. This policy explains, in plain terms, how we handle the personal data of guests and visitors. For any privacy question, write to concierge@vrelocollection.com.
What we collect
We collect what we need to book and look after your stay: (a) details you give us — name, email, phone, booking preferences, any dietary or accessibility needs, and messages to the hosts; (b) reservation and payment records — bookings, amounts, and a payment reference (your card details are handled by our payment processor, not stored by us); (c) your Upstream account, if you join; and (d) limited technical data — IP address, device and browser type, and the usage needed to run and secure the site.
How we use it, and our legal basis
We use your data to confirm and manage reservations and provide what you ask for (to perform our contract with you); to run Upstream and remember your preferences (our legitimate interests, or your consent where required); to send service messages such as confirmations (contract) and, only if you opt in, occasional updates (consent); and to keep the site secure, prevent fraud, and meet legal duties (legitimate interests and legal obligation). You can withdraw consent at any time.
Sharing and processors
We share only what is necessary, and only with: the property or partner you book, so they can host you; the providers who work for us under contract (payment processing, email, hosting, and analytics); and authorities where the law requires it. We do not sell your personal data, and we do not share it with advertising networks. Providers may use it only for the services they provide to us.
International transfers
Some providers may process data outside your country. Where data leaves the EEA, we rely on an adequacy decision or appropriate safeguards, such as the EU Standard Contractual Clauses.
Retention
We keep booking and account records for as long as we need them to provide the service and to meet legal, tax, and accounting requirements, then delete or anonymise them. Marketing preferences are kept until you opt out.
Your rights
Because our guests are mostly EU-based, we align with the GDPR. Subject to applicable law, you can ask to access, correct, delete, or receive a portable copy of your data, and to object to or restrict certain processing; where we rely on consent, you can withdraw it. Write to concierge@vrelocollection.com and we will respond within the time the law allows. You may also complain to your local data-protection authority.
Cookies
We use essential cookies to run the site and keep you signed in, and — only with your consent — limited analytics to help us improve it. You can manage non-essential cookies through your browser or our cookie controls.
This is a draft policy and may be updated; the current version and its effective date always appear at the top of this page. Nothing here limits the mandatory consumer-protection or data-protection rights you have under applicable law.