Privacy Policy | Purlanza

1. What this notice covers

As an editorial catalogue and booking-enquiry directory for premier accommodation, Purlanza takes on a firm duty to protect individual records and to maintain transparency wherever readers interact with the service.

This document sets out what Purlanza collects, how it is organised and used, when it is transferred, and how it is protected when you browse the catalogue, read ratings, register a profile, or submit an accommodation request.

2. What we collect through the service

To return accurate availability, verified assessments, and reliable enquiry confirmations, we handle several categories of record:

Who you are and how to reach you: Your name, title, language preference, country or region, email contact, and telephone details provided during profile creation or enquiry submission.
Reservation preferences: Dates of travel, room configuration and category, bedding selection, dietary and accessibility requests, and loyalty programme identifiers.
Billing and payment confirmation records: The cardholder's name, masked card identifiers, billing location, and confirmation tokens issued by certified payment intermediaries. Complete card numbers never reach Purlanza systems.
Technical metadata: Internet protocol address, browser and operating system version, referring URLs, regional time zone, device identifiers, and page interaction times.

3. Why we process, and on what basis

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Passing on your request: Transmitting itinerary details to the partner resort so a room hold and arrival preparations can be arranged.
Editorial personalisation: Adjusting the rankings and guides we surface to match the destinations and property styles you have shown interest in.
Protecting the service: Keeping the infrastructure secure, verifying that requests are legitimate, and preventing unauthorised access to reader profiles.
Service messages: Delivering enquiry acknowledgements, booking references, travel reminders, and critical service messages.
Statutory adherence: Satisfying accounting disclosure, tax reporting, and other duties imposed by the jurisdictions in which we operate.

4. Disclosure and partners

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

Hospitality partners: Listed hotels receive the minimum needed — name, travel dates, and room requirements — to process your request.
Payment processors: Billing information travels encrypted to accredited payment gateways that maintain current PCI-DSS validation.
Infrastructure providers: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Legal and regulatory authorities: We disclose where compelled by subpoena, court order, or statutory mandate, or where vital individual interests are at stake.

5. Digital identifiers and measurement

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Storage protection and retention

Layered administrative, technical, and physical controls protect records against unauthorised access, loss, alteration, or extraction. These include TLS 1.3 in transit, AES-256 at rest, segregated database clusters, and role-restricted credentials.

Records are held only as long as needed to complete an enquiry, resolve a question, satisfy audit requirements, or meet a statutory retention period. Once that period ends, records are permanently erased or irreversibly anonymised.

7. Your rights

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Access: Receive a copy of the data we hold about you, in a portable form, along with an explanation of its use.
Rectification: Ask us to fix any record that is inaccurate, incomplete, or no longer current.
Erasure: Ask for records to be deleted where no statutory or contractual basis for keeping them remains.
Limiting processing: Restrict our use of your data during any dispute over accuracy or over our grounds for processing.

Choices you can exercise

You have the right to control how your personal information is collected and used. Depending on your location and the laws that apply to you, the following opt-out choices are available:

Sale or sharing of personal information: Under the CCPA/CPRA and equivalent statutes elsewhere, you may refuse the sale or sharing of your personal information with third parties. Although we do not sell personal information in the traditional sense, limited data may reach trusted partners so that we can provide or improve our services.
Tracking technologies: You can manage or refuse cookies and tracking technologies through your browser settings, or through the cookie consent tools provided on this site.
Promotional email: Promotional email and newsletters can be discontinued through the unsubscribe link in any message or by contacting us directly.
Consent withdrawal: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Revisions

Purlanza may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.