Privacy Policy

This policy explains how Seriphos Estate collects, uses and protects your personal data when you visit www.seriphosestate.com, contact us or book a stay with us. We process personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Greek Law 4624/2019.

Who we are

The data controller is BE MY GUEST SERIFOS (VAT No. 801969773), which operates Seriphos Estate, Agios Ioannis, 840 05 Serifos, Cyclades, Greece. Email: welcome@be-my-guest.gr · Telephone: +30 697 0475381.

What data we collect

When you send an enquiry through our contact form, by email or by phone, we collect the details you give us:

• your name and email address
• your phone number, if you add it
• your travel dates, number of guests and the villas or experiences you are interested in
• anything you write in your message

When you book a stay, we also collect the details needed to confirm and deliver it:

• the names of the guests in your party and, for children, their ages
• your postal address and contact details
• payment details, processed by our payment provider: we do not store card numbers on this website
• preferences you choose to share, such as dietary requirements or allergies, used only to prepare your stay

When you visit the website, our hosting provider automatically records technical data needed to deliver and secure the site, such as your IP address, browser type, the page requested and the time of the request. With your consent, we also use Google Analytics to understand how visitors use the website (see “Cookies and analytics” below). We do not use advertising tracking.

Why we use your data and on what legal basis

• To answer your enquiry and prepare an offer (steps taken at your request before a contract, Article 6(1)(b) GDPR).
• To manage your booking, your stay and the services you ask for (performance of a contract, Article 6(1)(b)).
• To issue invoices and meet our tax, accounting and other legal obligations (legal obligation, Article 6(1)(c)).
• To keep the website secure and working and to protect our legal rights (legitimate interests, Article 6(1)(f)).
• To use dietary or health-related information you choose to share, only with your explicit consent (Article 9(2)(a)), which you may withdraw at any time.

We do not send marketing emails unless you have asked us to, and we never sell your personal data.

Who receives your data

We share personal data only where needed for the purposes above, with:

• our website hosting provider (Netlify, Inc.), which also receives the messages sent through our contact form;
• Google (Google Analytics), only if you accept analytics cookies;
• our booking engine and payment provider, when you book through bookings.seriphosestate.com;
• our email and IT service providers;
• partners who deliver services you request through our concierge, such as a private chef, boat or transfer, and only the details they need;
• accountants, tax and public authorities, where the law requires it.

These providers act on our instructions and are bound to protect your data. Some of them, such as Netlify and Google, may process data outside the European Economic Area; in that case the transfer is protected by safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Cookies and analytics

When you first visit, we ask whether you accept analytics cookies. Only if you click “Accept” do we load Google Analytics 4 (Google Ireland Limited), which sets cookies (such as _ga) to count visits, see which pages are used and measure clicks on “Book” and enquiries. IP addresses are not stored by Google Analytics 4. The legal basis is your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006); analytics cookies are kept for up to 14 months. If you click “Decline”, no analytics cookies are set. You can change your choice at any time through “Cookie settings” at the bottom of every page. Your choice is stored in your browser (local storage), not in a cookie.

Our typefaces are loaded from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google. The map on our Contact page loads from Google Maps only when you click “Show map”; Google may then set its own cookies. Links to Instagram and to our booking engine lead to services with their own privacy policies.

How long we keep your data

We keep enquiry data for as long as needed to answer you and, if no booking follows, no longer than 24 months. We keep booking and invoicing records for the period required by Greek tax and accounting law. Technical logs are kept by our hosting provider for a short period for security purposes.

How we protect your data

The website is served over an encrypted connection (HTTPS). Access to personal data is limited to the people who need it to serve you, and our providers are required to apply appropriate technical and organisational security measures.

Your rights

You have the right to access your personal data and receive a copy, to correct it, to ask us to erase it or restrict its use, to object to processing based on our legitimate interests, to receive your data in a portable format, and to withdraw any consent you have given at any time. To exercise these rights, email us at welcome@be-my-guest.gr. We will reply within one month, and we may ask you to confirm your identity first.

If you believe we have not handled your data correctly, you can lodge a complaint with the Hellenic Data Protection Authority, 1–3 Kifisias Avenue, 115 23 Athens, www.dpa.gr.

Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page.

Last updated: November 2026.