Privacy policy

1. Data Controller

The data controller for this website is Javea Nexus, operating the Villa Ermita holiday rental in Jávea (Xàbia), Spain.

For any privacy request, contact: javeagroup@gmail.com.

2. What we collect

When you send an enquiry through the website, we collect:

• Your name, email address, phone number and country.
• Number of guests and the arrival/departure dates you select.
• Any free-text message you choose to include.
• Basic technical data (IP address, browser user-agent, timestamps) recorded in server logs for security and abuse prevention.

3. How we use it

• To reply to your enquiry and arrange your stay.
• To send you a confirmation email and, where useful, follow-up information about your booking.
• To notify the villa owners by email so they can prepare your arrival.
• We do not sell, rent or share your data for marketing purposes.

4. Cookies & local storage

This website uses no advertising or analytics cookies. We only store two small items in your browser:

• villa-ermita-lang — remembers the language you selected.
• villa-ermita-cookie-consent — remembers whether you accepted or declined this notice.

5. Third-party services

We rely on a small number of trusted providers to run the site. Each acts as a processor on our behalf:

• Resend — sends transactional emails (enquiry confirmations, owner notifications).
• Lovable Cloud — hosting and form backend for this website.
• Google Maps — the embedded map on the location section is served by Google.

6. Platform note

This website is built and hosted on Lovable. You can review Lovable's platform security and privacy posture at the Lovable Trust Center: https://trust.lovable.dev.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data (rectification).
• Request deletion of your data (erasure).
• Receive your data in a portable format (portability).
• Object to processing or request that we restrict it.
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Contact for privacy requests

To exercise any of these rights, email javeagroup@gmail.com. We aim to respond within 30 days.