Privacy Policy

1. Introduction

Aya House ("we", "our", or "us") operates accommodation and retreat services in Gran Canaria, Canary Islands, Spain. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We may collect the following types of personal information:

• Contact information: name, email address, phone number, and mailing address
• Booking details: check-in/check-out dates, number of guests, accommodation preferences, and special requests
• Payment information: processed securely through third-party payment providers; we do not store credit card details
• Communication data: messages sent through our contact form, email correspondence, and event enquiries
• Technical data: IP address, browser type, device information, and cookies for website analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and managing accommodation bookings and retreat reservations
• Responding to your enquiries and providing customer support
• Sending booking confirmations, updates, and relevant event information
• Improving our website, services, and guest experience
• Complying with legal obligations under Spanish and EU law

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on: contractual necessity (to fulfil bookings), your consent (for marketing communications), legitimate interest (to improve our services), and legal obligations (tax and regulatory requirements under Spanish law).

5. Data Sharing & Third Parties

We do not sell your personal information. We may share your data with trusted third parties solely to provide our services, including payment processors, booking platforms (such as Airbnb), email service providers, and analytics tools. All third parties are required to protect your data in accordance with GDPR requirements.

6. Cookies

Our website uses cookies to enhance your browsing experience and analyse site traffic. You can control cookie preferences through your browser settings. Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand how visitors interact with our site.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking records are retained for a minimum period as required by Spanish tax regulations. You may request deletion of your data at any time, subject to legal retention requirements.

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Request portability of your data
• Withdraw consent at any time for consent-based processing

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) if you believe your data protection rights have been violated.