Privacy Policy

Who we are

Serenaia (“we”, “us”) is the controller of the personal data described in this policy. You can contact us about privacy matters using the contact form on our Contact page.

What we collect

• Details you give us when you send a request: your name, email address, phone number, country, preferred contact method and the information you share about your plans (experiences, destination, dates, number of guests, approximate budget and any message).
• Information needed to prepare and deliver your arrangements, such as passenger names or dietary requirements, if you choose to provide it.
• Basic technical information about how the request was submitted (for example the page you arrived on and campaign parameters in the link) to understand which channels bring us inquiries.
• Optional analytics data, only if you accept analytics cookies.

Please do not send sensitive personal data (such as health information) unless it is necessary for your arrangements, for example an allergy.

How and why we use it

• To respond to your request and prepare a proposal — steps taken at your request before entering into a contract, and on the basis of your consent given in our form.
• To arrange, confirm and manage your booking — performance of a contract.
• To keep business, accounting and tax records — legal obligation.
• To protect our website from spam and abuse — legitimate interests.
• To send occasional inspiration by email — only if you opted in. You can unsubscribe at any time.

Who we share it with

We share only the details needed with the service providers involved in your arrangements (for example a charter operator, driver, chef or accommodation provider). We also use carefully selected processors to run our business, including website hosting and security (Cloudflare), transactional email delivery (Resend) and, if you consent, privacy-friendly analytics. We never sell your personal data.

Some providers may process data outside the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

How long we keep it

We keep inquiries that do not lead to a booking for up to 24 months, so that we can help you if you return to your plans. Booking records are kept for as long as required by applicable accounting and tax laws. You can ask us to delete your data sooner.

Your rights

Under the GDPR you have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time. To exercise any of these rights, contact us using the contact form on our Contact page. You also have the right to complain to a data protection supervisory authority, such as the Agencia Española de Protección de Datos in Spain or the Garante per la protezione dei dati personali in Italy.

Security

Our website is served over HTTPS. Access to client information is restricted to authorised staff, protected by individual accounts and role-based permissions.

Cookies

See our Cookie Policy for details of the limited storage this website uses.

Changes

We may update this policy from time to time. The date at the top of this page shows when it was last revised.