Privacy Policy

We take your privacy seriously. This notice describes how Crystalshoreretreat obtains, processes and protects personal information belonging to guests and people who visit this website.

Last updated: 2026-07-20 · Effective immediately.

1. Who we are

Crystalshoreretreat ("we", "us", "our") runs the website at https://crystalshoreretreat.online/. Our registered office is 58 La Croisette, 06400 Cannes, FR. For privacy questions, write to [email protected].

2. Information we collect

We gather the following kinds of information:

• Reservation details: name, address, contact details, payment information, stay dates, dietary and accessibility needs.
• Communication data: messages you send via our website, email or phone.
• Website usage: IP address, browser, device, referring page, pages viewed, timestamps, anonymised analytics events.
• Cookies and similar technologies: see Section 6 below.

3. How we use information

Personal data is handled solely to deliver and refine our services, including:

• To handle reservations, payments and to deliver the services you reserve with us.
• To reach you about your stay, issue confirmations and answer enquiries.
• To meet legal duties (tax records, anti-money-laundering, gaming licence requirements).
• To refine our website and services, measured through aggregated, privacy-respecting analytics.
• To send marketing messages when you have clearly opted in; you may unsubscribe whenever you wish.

4. Legal basis (GDPR)

For visitors in the European Economic Area and the United Kingdom we rely on these legal bases under Articles 6(1)(a)-(f) of the General Data Protection Regulation: your consent, performance of a contract, compliance with a legal obligation, and our legitimate interest in operating a secure, reliable website.

5. Sharing of personal data

We never sell personal data. We disclose it only to: trusted vendors working for us (payment processors, booking platforms, IT hosting) under written contracts; public authorities when the law requires it; and successors if a corporate reorganisation occurs.

6. Cookies

This site relies on strictly necessary cookies to operate. Optional analytics and marketing cookies are placed only after you consent via our cookie banner. You can withdraw consent at any time by clearing browser storage for this site.

7. Data retention

We keep reservation and accounting records for as long as tax and gaming-licence rules require (typically 10 years). Marketing data stays only while your consent is still valid. Server logs are removed within 30 days.

8. Your rights

Where local law allows, you may access, correct, erase, limit or object to processing of your personal data, and request data portability. To use any of these rights, contact [email protected]. You may also file a complaint with your local data protection authority.

9. International transfers

If personal data moves outside the European Economic Area, we maintain adequate protection through Standard Contractual Clauses or equivalent measures.

10. Children

Our website is meant for adults aged 18 and over. We do not knowingly gather personal data from children under 16. If you think such data was submitted, contact us so we can remove it.

11. Changes to this policy

We may revise this policy periodically. The "Last updated" date at the top of this page shows the current version. Significant updates will be noted on this website.