Privacy Policy | Blavorina

1. What this notice covers

Blavorina publishes hospitality reviews and passes reservation enquiries to properties. Guarding personal data and explaining our handling of it clearly is an obligation we hold across all reader touchpoints.

Below we explain the categories Blavorina gathers, the purposes they serve, the parties they may reach, and the safeguards applied — whether you are reading rankings, creating a profile, or sending a stay enquiry.

2. Information we collect

Delivering accurate lodging information, verified reviews, and dependable enquiry handling requires us to process the following categories:

Identity and contact details: Your name, title, language preference, country or region, email contact, and telephone details provided during profile creation or enquiry submission.
Reservation preferences: Check-in and check-out dates, room type and bedding choice, suite tier, dietary requirements, accessibility needs, and hotel loyalty references.
Billing verification records: Cardholder identity, partial card indicators, billing address, and processor-issued confirmation tokens. At no point is a full card number retained on Blavorina infrastructure.
Device telemetry and technical metadata: IP address, browser version, operating system, referring pages, time zone, device identifiers, and interaction timestamps.

3. Why we process, and on what basis

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Enquiry fulfilment: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Tailoring what you see: Presenting hospitality rankings and reviews aligned with the regions and property categories you browse.
Fraud prevention and security: Defending the platform's infrastructure, checking that submissions are genuine, and protecting profiles from unauthorised access.
Keeping you informed: Sending enquiry updates, confirmations, itinerary reminders, and necessary customer service notices.
Statutory adherence: Meeting accounting, tax reporting, and record-keeping requirements set by the applicable administrative authorities.

4. Disclosure and partners

Personal identifiers are never sold, rented, or leased to unaffiliated businesses. Data moves only where a contract governs it, and only to these recipients:

The hotels themselves: Listed hotels receive the minimum needed — name, travel dates, and room requirements — to process your request.
Accredited payment intermediaries: Billing information travels encrypted to accredited payment gateways that maintain current PCI-DSS validation.
Technical infrastructure partners: Enterprise-grade data centres and delivery networks store encrypted backups to maintain uptime and disaster resilience.
Legal and regulatory authorities: Disclosure may follow a valid legal demand, court order, or regulatory mandate, or be necessary to protect someone's vital interests.

5. Cookies and analytics

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Storage protection and retention

Protection is layered across administrative, technical, and physical measures: encrypted transport under TLS 1.3, AES-256 encryption at rest, isolated database clusters, and credentials restricted by role.

We retain data only for the time required to fulfil the request, handle follow-up questions, meet audit standards, or comply with a retention schedule set in law. After that, records are deleted or anonymised beyond recovery.

7. Rights and choices available to you

Subject to verification of your identity and the law in your jurisdiction, you may exercise the following:

Access and inspection: Receive a copy of the data we hold about you, in a portable form, along with an explanation of its use.
Rectification: Have inaccurate, incomplete, or outdated details corrected without undue delay.
Right to erasure: Request deletion of your records where we no longer have a legal reason to retain them.
Limiting processing: Restrict our use of your data during any dispute over accuracy or over our grounds for processing.

Your opt-out options

How your personal information is gathered and used remains under your control. Subject to your location and the applicable legislation, you may exercise these opt-outs:

Data sharing and sale: You may opt out of the sale or sharing of your personal information with third parties where laws such as the CCPA/CPRA in California, or comparable legislation elsewhere, provide for it. While we do not sell personal information in the conventional sense, some data may be shared with trusted partners in order to provide or improve the service.
Cookies and tracking: You can manage or refuse cookies and tracking technologies through your browser settings, or through the cookie consent tools provided on this site.
Marketing messages: Opt out of promotional messages and newsletters using the unsubscribe link in any communication, or by writing to us.
Withdrawal of consent: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

Write to [email protected], or use the contact form on this site, to exercise any right or lodge an opt-out request.

8. Changes to this notice

This notice may be refined periodically in line with legal or architectural change. Any material modification is reflected on this page with an updated date, and further use of the service constitutes acknowledgement.