Privacy Policy | Ortivana

1. What this notice covers

Ortivana is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Ortivana, from browsing ratings to submitting a room request.

2. Categories of information gathered

The following categories are collected so that we can provide accurate availability, verified editorial assessments, and reliable confirmations:

Identity and contact details: Full name, form of address, preferred language, region of residence, email address, and any telephone number you supply when registering or submitting an enquiry.
Reservation preferences: Arrival and departure dates, room and bed configuration, suite category, dietary notes, accessibility requests, and any loyalty membership reference.
Billing verification records: Cardholder name, truncated card indicators, billing address, and transaction confirmation tokens handled by accredited payment processors. Full card numbers are never stored on Ortivana servers.
Technical and device data: Your IP address, browser build, operating system, the page that referred you, time zone setting, device identifiers, and timestamps for page interactions.

3. Legal grounds and operational purposes

Processing takes place only under an established lawful ground — contractual necessity, legitimate interest, legal obligation, or consent you have given. Those grounds support the following purposes:

Enquiry fulfilment: Forwarding your stay details to the relevant property so it can respond on availability and prepare for arrival.
Editorial personalisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Security and verification: Defending the platform's infrastructure, checking that submissions are genuine, and protecting profiles from unauthorised access.
Operational communication: Issuing reservation updates, confirmation vouchers, itinerary reminders, and essential service notifications.
Statutory adherence: Satisfying accounting disclosure, tax reporting, and other duties imposed by the jurisdictions in which we operate.

4. Who receives your information

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

The hotels themselves: Selected properties are given only the name, arrival dates, and room details required to answer an enquiry or hold a room.
Payment processors: Where payment is involved, encrypted billing details are routed to PCI-DSS validated processing partners.
Infrastructure providers: Encrypted database backups sit with tier-1 hosting and content distribution providers to ensure availability.
Courts and regulators: We disclose where compelled by subpoena, court order, or statutory mandate, or where vital individual interests are at stake.

5. Cookies, storage, and analytics

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Safeguards and how long we keep records

Layered administrative, technical, and physical controls protect records against unauthorised access, loss, alteration, or extraction. These include TLS 1.3 in transit, AES-256 at rest, segregated database clusters, and role-restricted credentials.

Records are held only as long as needed to complete an enquiry, resolve a question, satisfy audit requirements, or meet a statutory retention period. Once that period ends, records are permanently erased or irreversibly anonymised.

7. Rights and choices available to you

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Access and inspection: Obtain a portable copy of the personal records we hold and confirm how they are being handled.
Rectification: Ask us to fix any record that is inaccurate, incomplete, or no longer current.
Erasure: Request deletion of your records where we no longer have a legal reason to retain them.
Limiting processing: Limit how we process your data while accuracy or a legitimate interest is being examined.

Your opt-out options

You have the right to control how your personal information is collected and used. Depending on your location and the laws that apply to you, the following opt-out choices are available:

Sale or sharing of personal information: Under the CCPA/CPRA and equivalent statutes elsewhere, you may refuse the sale or sharing of your personal information with third parties. Although we do not sell personal information in the traditional sense, limited data may reach trusted partners so that we can provide or improve our services.
Cookie controls: Cookies and similar tracking tools can be managed or declined via your browser configuration or the consent controls published on this website.
Marketing messages: You can stop receiving promotional email or newsletters at any time by using the unsubscribe link in any message, or by contacting us directly.
Withdrawing consent: Consent given earlier can be withdrawn whenever you choose, without affecting the lawfulness of any processing that took place while the consent was in force.

Write to [email protected], or use the contact form on this site, to exercise any right or lodge an opt-out request.

8. Updates to this document

Ortivana may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.