Privacy & inquiries

Contact the team

For questions about this website or your personal information, email hello@croatialuxuryhotels.com. You do not need to submit another travel inquiry to make a privacy request.

When you send an inquiry

The form collects your name, email address and the trip or partnership information you choose to share. We use this information to review your request, respond and discuss any proposed service. Only your name and email are required. Please do not include passport details, payment information or sensitive personal information.

Why we use this information

We use travel inquiries to take the steps you request before entering into a possible planning agreement. We handle general questions and business correspondence on the basis of our legitimate interest in responding and running the service. Limited technical information is also used to protect the form from repeated submissions. Optional analytics depend on your consent. Sending an inquiry does not give consent to marketing emails.

How the message reaches us

The website sends inquiry details to the team’s email inbox using SendGrid. Your email address is used as the reply address. Team correspondence is managed in Gmail, with ImprovMX handling forwarding and sending for our domain email address. The form does not create a public profile or save your message in a website customer database.

Our website and email providers process the technical information needed to deliver and protect their services. Their processing may take place outside your country. Details of their services are available in the Twilio / SendGrid privacy notice, Google privacy policy and ImprovMX privacy policy.

Protecting the inquiry form

The form keeps temporary counters in server memory to limit repeated submissions. The email counter uses a keyed hash of your email address and contains no message content. Counters stop affecting submissions after up to 15 minutes. Expired entries are cleared when the form processes further requests, and all counters are lost when the server process restarts. This protection does not use a separate database.

How long we keep inquiries

An inquiry that does not become a paid engagement is kept for six months after the last communication. The team reviews these conversations monthly and permanently removes those that have reached that limit, including matching sent messages, attachments and copies in the email trash. Deletion therefore takes place at the next monthly review after the six-month point. You can request earlier deletion.

This is a manual process, not an automatic timer. If we agree on a paid service, the retention arrangements for the service and any required billing records will be explained separately before work begins. Provider security logs and backup copies follow the providers’ own retention processes; deleting a conversation does not immediately erase every provider backup.

Optional analytics

When enabled, optional analytics load through Google Tag Manager only after you accept analytics. Our website events describe pages visited, hotel links clicked and whether an inquiry succeeded. They do not include your inquiry name, email address, travel details or message. Analytics providers may still process browser, device and online identifier information. Your choice is stored in this browser for up to 180 days.

You can review or change your choice below. If you withdraw permission, the page reloads to stop loading optional tracking. Cookies already set by an analytics provider can also be removed through your browser settings.

Booking through another website

Hotel availability links open an external booking provider such as Expedia. That provider handles your booking and any information you enter there under its own terms and privacy notice.

Access, correction and deletion

Email hello@croatialuxuryhotels.com, preferably from the address used for your inquiry, and tell us what you would like us to do. We will use the minimum information needed to identify the conversation, review your request and respond without undue delay, normally within one month. If more time is legally permitted and necessary, we will explain why within that month.

For an accepted deletion request, we remove the relevant conversations and attachments from the team’s inbox, sent mail and trash, and check for any working copies we hold. We confirm completion or explain any information that must be retained and why. Where applicable, you can also request restriction, object to processing, or request a portable copy of your data. You can complain to your local data protection authority; Croatia’s authority is AZOP.