Privacy Policy
How we collect, use, and protect your personal information
Last updated: March 2, 2026
At Sunlit Elegance Escape, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you book accommodation with us and during your stay.
We are committed to complying with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.
Booking Information
- Full name
- Email address
- Phone number
- Check-in and check-out dates
- Number of guests
- Special requests or requirements
Tourist Tax Registration (Check-In)
As required by Bulgarian law, we collect the following information during check-in for tourist tax registration:
- Full name (as it appears on your travel document)
- Date of birth
- Passport or ID card number
- Country of issue
- Actual check-in and check-out dates
Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract performance: To fulfill your booking and provide accommodation services
- Legal obligation: To comply with Bulgarian tourist tax registration requirements
- Legitimate interests: To communicate with you about your stay and improve our services
Specific Uses
- Processing and confirming your booking
- Communicating with you about your reservation
- Registering your stay with Bulgarian tax authorities
- Providing customer support
- Complying with legal and regulatory requirements
We implement appropriate technical and organizational measures to protect your personal information:
- Encrypted storage: All data is stored in encrypted databases with SSL/TLS connections
- Access control: Only the property owner has access to guest check-in information
- Secure authentication: Admin access requires secure login credentials
- No third-party sharing: We do not sell or share your personal information with third parties for marketing purposes
- Regular security updates: Our systems are regularly updated to maintain security standards
We retain your personal information only for as long as necessary:
- Booking information: Retained for 3 years after your stay for accounting and customer service purposes
- Tourist tax registration data: Retained for 5 years as required by Bulgarian law
- After retention period: Your data is securely deleted from our systems
Under GDPR and Bulgarian data protection law, you have the following rights:
- Right to access: Request a copy of the personal information we hold about you
- Right to rectification: Request correction of inaccurate or incomplete information
- Right to erasure: Request deletion of your data (subject to legal retention requirements)
- Right to restrict processing: Request limitation on how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at the email address provided below.
We do not sell your personal information. We may share your information only in the following circumstances:
- Legal authorities: When required by law or to comply with legal processes
- Bulgarian tax authorities: Tourist tax registration data as required by law
- Service providers: Trusted service providers who assist in operating our website and business (under strict confidentiality agreements)
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
We will respond to your request within 30 days as required by GDPR.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.