Draft Legal Template — Version v1.0-draft-2026-11
Privacy Notice
Requires Operator Legal Counsel Review Before Commercial Launch.
Development Fixture Disclosure: This Privacy Notice is a structural legal template prepared for the Velmora application build. Before commercial launch with real guest traffic, the property operator must insert verified data-controller registration details, DPO contact coordinates and jurisdiction-specific GDPR clauses.
1. Scope & Data Controller Status
When you submit a general enquiry (`/contact`), an availability request (`/plan-your-stay`) or a double-opt-in newsletter subscription on Velmora, we collect only the minimum personal information necessary to respond to your request.
2. Categories of Data Processed
- Contact & Stay Enquiries: Full name, email address, optional telephone number, preferred stay dates, party composition, room or seasonal offer reference, and plain-text notes.
- Newsletter Double Opt-In: Email address, consent version (`v1.0-draft-2026-11`), timestamp, and cryptographic confirmation/unsubscribe state.
- Abuse Prevention & Security Logs: Rate-limiting counters and audit events without storing plaintext credentials or payment card data.
3. Retention & Guest Rights
Enquiry records and newsletter subscriptions may be exported or permanently erased upon request via the guest desk (`Owner` GDPR export and deletion tools in `/admin`). You may withdraw newsletter consent at any time using the one-click `/newsletter/unsubscribe` link.