Privacy policy

Who is responsible

Villa Cyclades, a boutique hotel on Contadora Island, in the Pearl Islands archipelago, Panama. The company’s legal name, registered address and email for privacy matters will be published here. In the meantime, you can write to us from the contact page.

What data we process and why

• Contact form. Name, email, phone (optional), subject and message, in order to reply to you. We process them with your consent, which you give by checking the box on the form, and we send you a copy of your message.
• WhatsApp. If you choose to write to us on WhatsApp, the conversation goes through WhatsApp, which belongs to Meta, under its own terms.
• Reservations. At present, the website does not process payments or reservations: requests are made via WhatsApp or the form. When online reservations are active, they will be handled by the booking engine under its own policy, which we will link here.
• Concierge Cyclades. It is an automated assistant that runs in your browser. Your questions are not sent to any server: the conversation is stored only in your browser session and is deleted when you close the tab. If you accept analytics, the type of question is recorded (for example, “how to get here”), never the text.
• Analytics. Only if you accept it, we use Google Analytics 4 to learn how the website is used: pages viewed, availability searches and use of the concierge.
• Technical logs. Like any website, the server that hosts it records technical data, such as the IP address and browser, so that it works and stays secure.

Who we share it with

We do not sell your data. It is used only by the providers we need: the service that delivers the form emails (Resend), the protection against automated form submissions (Cloudflare Turnstile, if active), Google Analytics if you accept it, and the provider that hosts the website. Some are outside Panama, for example in the United States.

How long we keep it

Form messages: for as long as necessary to assist you. The specific period will be published here.

Your rights

Under Panama’s Law 81 of 2019, and the General Data Protection Regulation (GDPR) if you are in the European Union, you can request access, rectification, cancellation, objection and portability with respect to your data, and withdraw your consent at any time. You can make your request from the contact page. If you are not satisfied, you can file a complaint with the National Authority for Transparency and Access to Information (ANTAI) of Panama.

Changes

If we change this policy, we will say so here, along with the date of the latest update.