This privacy policy explains how Sharon and John Millington ("we", "us") collect, use, and protect personal data when you visit studio-beaulieu.com or make a booking enquiry for our studio apartment in Beaulieu-sur-Mer, France.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable French data protection law.
1. Who we are
Data controller: Sharon and John Millington
Property: Studio apartment, Beaulieu-sur-Mer, 06310, France
Registration number: 107168 006 011 26 0098
Contact: jdmillington@gmail.com
2. What data we collect
When you submit a booking enquiry through this website, we collect:
Full name
Email address
Phone number (optional)
Nationality
Intended check-in and check-out dates
Number of guests
Any message you include
Our hosting provider may process basic technical information, including IP addresses, through standard security logs. Our own security controls temporarily use IP addresses to limit repeated login, price-check and enquiry attempts; these records are deleted after 24 hours. Separately, our first-party audience measurement records anonymous page paths, broad device category, referring website and booking interactions. Analytics does not store your IP address, user agent, precise location or a persistent visitor identifier.
3. Why we collect it and our legal basis
To respond to your booking enquiry — legal basis: pre-contractual steps at your request (GDPR Article 6(1)(b))
To manage your booking if confirmed — legal basis: performance of a contract (GDPR Article 6(1)(b))
To comply with French tourist accommodation registration requirements — legal basis: legal obligation (GDPR Article 6(1)(c))
To protect the security of our property and website — legal basis: legitimate interests (GDPR Article 6(1)(f))
To understand anonymous website usage and improve the booking journey — legal basis: our legitimate interest in measuring and improving our website, using data-minimising first-party statistics
We do not use your data for marketing purposes and will never sell it to third parties.
4. Who we share your data with
We share your data only where necessary:
Formspree (formspree.io) — used to forward booking enquiry emails to us. Their privacy policy is available at formspree.io/legal/privacy-policy
Hostinger — our web hosting provider, where your data is stored on servers within the EU. Their privacy policy is at hostinger.com/privacy-policy
Stripe — processes the 20% booking deposit on its secure hosted checkout page. Stripe receives the payment and contact information required to process the transaction; card details are never stored on our website. Stripe’s privacy policy is at stripe.com/privacy
Airbnb — if your booking originates via Airbnb, their privacy policy applies to data collected on their platform
Google Fonts — supplies the typefaces used by the website; your browser connects to Google's font servers when loading a page
We do not use Google Analytics, Facebook Pixel, advertising trackers or third-party analytics services. Anonymous audience statistics are processed only in our own website database and are not shared for advertising or cross-site tracking.
5. How long we keep your data
Booking enquiries are deleted after 12 months
Personal identifiers in confirmed booking records are anonymised after 5 years; non-identifying financial totals may be retained where required for accounting
Abandoned or expired Stripe checkout records are deleted after 30 days; completed payment records follow the confirmed-booking and accounting retention period
Temporary IP-based security records are deleted after 24 hours, and admin audit records do not collect IP addresses
Server log data is deleted after 90 days
Detailed anonymous audience events are deleted after 90 days; live page activity expires after inactivity
6. Your rights under GDPR
You have the following rights regarding your personal data:
Right of access — you may request a copy of the data we hold about you
Right to rectification — you may ask us to correct inaccurate data
Right to erasure — you may ask us to delete your data, subject to our legal retention obligations
Right to restrict processing — you may ask us to limit how we use your data
Right to data portability — you may request your data in a structured, machine-readable format
Right to object — you may object to processing based on legitimate interests
To exercise any of these rights, contact us at jdmillington@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the French data protection authority: CNIL (cnil.fr).
7. Cookies
The website may set a first-party technical session cookie (PHPSESSID) to support secure session handling. It is strictly necessary, is not used for tracking and normally expires when the browser is closed.
Anonymous audience measurement does not use analytics cookies, local storage, advertising identifiers or browser fingerprinting. A random page token exists only in memory while a page is open and is not used to identify you across pages or visits.
If you disable anonymous audience measurement below, we set a strictly necessary preference cookie solely to remember that choice for one year.
8. Data security
We protect your data using industry-standard measures including HTTPS encryption, hashed password storage, and access-controlled databases hosted within the EU. Only the property owners have access to personal booking data.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Material changes will be notified by updating the date.
Questions about your data?
Contact us at jdmillington@gmail.com and we will respond within 30 days.