Privacy Policy – Villetta Uliveto

Last Updated: 07/06/2026

1. Introduction

Villetta Uliveto ("we", "us", "our") is committed to protecting your privacy and handling your personal data transparently and securely.

‍ This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you:

  • Visit our website at www.villettauliveto.com;

  • Make an enquiry or booking;

  • Stay at Villetta Uliveto;

  • Communicate with us before, during, or after your stay.

We process personal data in accordance with:

  • The UK General Data Protection Regulation (UK GDPR);

  • The Data Protection Act 2018;

  • The EU General Data Protection Regulation (EU GDPR) (Regulation (EU) 2016/679);

  • Applicable Italian laws governing accommodation providers and guest registration.

2. Data Controller

The Data Controller responsible for your personal data is:

Villetta Uliveto

Villetta Uliveto is operated by Franco Lombardi trading as Villetta Uliveto.

Business correspondence address: 31 Gloucester Road, Bristol. UK. BS7 8AA
Email: ciao@vilettauliveto.com
Telephone: +44 7868137786

For any privacy-related enquiries, please contact us using the details above.

3. Personal Data We Collect

Booking and Contact Information

We may collect:

  • Full name

  • Postal address

  • Email address

  • Telephone number

  • Nationality

  • Number and names of guests

  • Arrival and departure dates

  • Special requests and preferences

  • Correspondence with us

Payment Information

Payments made through our website are processed by third-party payment providers. We do not store full payment card details.

We may receive limited payment-related information such as:

  • Name

  • Billing address

  • Payment status

  • Transaction reference

Identity Verification Information

Where required for security, fraud prevention, insurance requirements, or legal compliance, we and/or our verification provider Truvi may collect:

  • Passport details

  • National identity card details

  • Driving licence details

  • Date of birth

  • Selfie photographs for identity verification

  • Verification results

  • Fraud-prevention and risk-assessment information

Stay Information

We may collect:

  • Check-in and check-out details

  • Guest communications

  • Maintenance or incident reports

  • Information relating to property damage or disputes

Website Information

When you visit our website, certain technical information may be collected automatically, including:

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Website usage data

  • Cookie and analytics information

4. How We Use Your Personal Data

We use personal data for the following purposes:

Performance of a Contract

To:

  • Manage reservations;

  • Process bookings;

  • Communicate with guests;

  • Provide accommodation services;

  • Arrange check-in and check-out;

  • Respond to enquiries.

Compliance with Legal Obligations

To:

  • Comply with Italian guest registration requirements;

  • Verify guest identity where legally required;

  • Maintain accounting and tax records;

  • Respond to lawful requests from authorities.

Legitimate Interests

To:

  • Prevent fraud;

  • Protect our property and guests;

  • Manage insurance requirements;

  • Resolve disputes;

  • Enforce booking terms;

  • Improve our services.

Consent

Where required by law, we rely on consent for certain marketing communications and non-essential website cookies.

‍ ‍

Marketing Communications

If you subscribe to our newsletter, request updates, or otherwise consent to receive marketing communications, we may use your name and email address to send information about Villetta Uliveto, special offers, availability updates, and other relevant news.

We use Squarespace Email Campaigns to manage and deliver marketing communications.

You can withdraw your consent and unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly.

We will not send marketing communications where prohibited by applicable law.

‍ ‍

5. Website Hosting and Booking Management

‍ ‍

Website Hosting

Our website is hosted by Squarespace.

When you visit our website, Squarespace may process technical and usage information necessary to provide website functionality, security, and analytics.

‍ ‍

Booking Management

We use Bookalet as our booking and property management system.

Information relating to enquiries, bookings, guest communications, availability, and reservation management may be stored and processed through Bookalet to facilitate the operation of our accommodation business.

‍ ‍

6. Payment Processing

Payments made through our website may be processed by:

  • Stripe

  • PayPal

These providers process payment information as independent data controllers in accordance with their own privacy notices.

Payment providers may collect and process:

  • Name

  • Billing address

  • Email address

  • Payment information

  • Transaction details

  • Fraud prevention information

We do not have access to or store complete payment card details.

‍ ‍

7. Identity Verification and Guest Screening

To help protect our property, prevent fraud, satisfy insurance requirements, and maintain booking security, guests may be required to complete identity verification through Truvi.

Verification may include:

  • Submission of a passport, identity card, driving licence, or other government-issued identification;

  • Selfie or facial matching verification;

  • Fraud prevention and risk assessment checks;

  • Verification of booking legitimacy.

Truvi may use automated systems and risk-assessment tools to verify guest identities and assess booking risk.

We receive only the information necessary to determine whether verification has been completed successfully and whether any booking risks have been identified.

Failure to complete required identity verification may result in cancellation of a booking or refusal of access to the property.

Truvi processes personal data in accordance with its own privacy notice and applicable data protection laws.

8. Italian Guest Registration Requirements

Italian law requires accommodation providers to identify guests and provide certain information to public authorities.

Accordingly, we may be legally required to collect and process:

  • Full name;

  • Date of birth;

  • Place of birth;

  • Nationality;

  • Passport or identity card details;

  • Arrival and departure information.

This information may be submitted to relevant Italian authorities and law enforcement agencies through official registration systems where required by law.

The legal basis for this processing is compliance with a legal obligation.

‍ ‍

9. Legal Bases for Processing

We process personal data on one or more of the following legal bases:

  • Performance of a contract;

  • Compliance with legal obligations;

  • Legitimate interests;

  • Consent where required.

‍ ‍

10. Sharing Personal Data

We may share personal data with:

  • Squarespace (website hosting and website services);

  • Bookalet (booking and property management services);

  • Stripe (payment processing);

  • PayPal (payment processing);

  • Truvi (identity verification and guest screening);

  • Professional advisers, accountants, and insurers;

  • Government agencies, regulators, and law enforcement authorities where legally required.

We do not sell personal data to third parties.

11. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom, Italy, or the European Economic Area.

Where personal data is transferred internationally, we ensure appropriate safeguards are implemented, including:

  • Adequacy decisions recognised by the UK Government or European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • UK International Data Transfer Agreements (IDTAs);

  • Other lawful transfer mechanisms recognised under applicable data protection laws.

12. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Managing bookings;

  • Meeting legal obligations;

  • Tax and accounting compliance;

  • Fraud prevention;

  • Insurance requirements;

  • Resolving disputes.

Identity verification data may also be retained by Truvi in accordance with its own retention policies and legal obligations.

When personal data is no longer required, it will be securely deleted or anonymised.

13. Security

We implement appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access;

  • Loss;

  • Misuse;

  • Alteration;

  • Disclosure;

  • Destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

‍ ‍

14. Your Rights

Subject to applicable law, you may have the right to:

  • Access your personal data;

  • Correct inaccurate personal data;

  • Request deletion of personal data;

  • Restrict processing;

  • Object to processing;

  • Request data portability;

  • Withdraw consent where processing is based on consent;

  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the details provided above.

‍ ‍

15. Complaints

United Kingdom‍ ‍

You may lodge a complaint with the Information Commissioner's Office (ICO).

Italy and European Union

You may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or another competent supervisory authority within the European Union.

‍ ‍

16. Cookies and Similar Technologies

Our website may use cookies and similar technologies provided by Squarespace and integrated third-party services.

Cookies may be used to:

  • Enable essential website functionality;

  • Support booking and payment processes;

  • Remember user preferences;

  • Analyse website traffic and performance;

  • Improve user experience.

Where required by law, visitors will be asked to provide consent before non-essential cookies are placed on their devices.

Further information may be provided in a separate Cookie Policy.

‍ ‍

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices.

Any revised version will be published on our website and will become effective upon publication.

‍ ‍

18. Contact Us

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Villetta Uliveto

Villetta Uliveto is operated by Franco Lombardi trading as Villetta Uliveto.

Business correspondence address: 31 Gloucester Road, Bristol. UK. BS7 8AA
Email: ciao@vilettauliveto.com
Telephone: +44 7868137786

‍ ‍