Privacy Policy

The data controller is HANDY MAN MIJAS SL, CIF B56632151, C Jose Orbaneja 61, 16, 29649 Mijas Calahonda, Málaga, Spain.

You can contact us at hello@stayzia.es or +34 617 451 093.

We use Vercel Web Analytics to understand how the website is used. It is anonymized and cookieless. Anonymous interaction events are limited to property slugs, result counts, guest counts, stay length and where an action occurred in the interface. We do not send names, contact details, full stay dates or other personal information to analytics, and we do not use advertising trackers.

• Contact details you provide, such as name, email address, phone number and WhatsApp details.
• Booking details, including property, dates, guest count, special requests and price quote.
• Payment status and checkout references from Stripe. We do not see or store full card numbers.
• Messages you send through the contact form, email, phone or WhatsApp.
• Technical information needed to keep the site and admin area secure, such as IP-derived login attempt records.

• To answer enquiries and help you choose a property.
• To prepare, confirm and manage bookings.
• To process payments, security deposits, cancellations and refunds.
• To provide guest support before, during and after a stay.
• To meet accounting, tax, tourism, consumer protection and security obligations.
• To protect the admin area and prevent misuse of the website.

We process booking and enquiry data where it is needed to take steps before a contract or to perform a booking contract. Some data is kept to meet legal obligations, including accounting and tourism requirements. Security records are processed under our legitimate interest in protecting the website and guest data.

We use trusted providers to run the site and bookings, including Vercel for hosting and anonymized cookieless Web Analytics, Neon for database storage, Vercel Blob for media storage, Stripe for payment checkout and Resend for email delivery. If you contact us through WhatsApp, Meta/WhatsApp will process that message under its own terms.

Providers may process data outside Spain or the EEA. Where that happens, we rely on the safeguards offered by the provider, such as EU standard contractual clauses or equivalent transfer protections.

• Enquiries are normally kept for up to 24 months unless they become part of a booking.
• Booking, payment and invoice records are normally kept for up to six years where accounting, tax or legal rules require it.
• Admin login failure records are short-term security records and are automatically cleared from the active rate-limit window.
• We may keep limited records for longer if needed to handle a dispute, chargeback, insurance matter or legal claim.

You can ask to access, correct, delete, restrict or object to the processing of your personal data, and you can request portability where applicable. Contact us at hello@stayzia.es.

You can also contact the Spanish Data Protection Agency, the AEPD, if you believe your data protection rights have not been handled correctly.