Privacy policy.

Lefkada Estate is responsible for the personal data you send us through this site. Our details are on the business details page. For privacy questions write to hello@lefkadaestate.com.

When you book a villa, your contract is with its owner, who is also responsible for the booking data. We process it on the owner's behalf to handle your booking and look after you during your stay.

• Enquiries and messages (name, email, phone or WhatsApp, your message): to reply to you. Legal basis: steps you ask us to take before a contract, or our legitimate interest in answering you.
• Bookings (name, contact details, country, dates, number of guests, payment status): to make and run your booking, and to meet legal obligations such as the owner's short-stay declarations. Legal basis: contract and legal obligation.
• Owner requests (name, contact details, area and details of the home): to send you an estimate or a proposal.
• Buying, selling and Golden Visa enquiries (name, contact details, what you are looking for or selling): to send you properties that match, arrange viewings and visits, or introduce you to a lawyer if you ask us to.

We don't use your data for advertising and we don't sell it. We only send you news if you have clearly agreed to it.

• Website hosting: the company that hosts this site stores the messages and bookings you send through it for us.
• Payments: Stripe. Card payments go through Stripe, into the villa owner's Stripe account. We never see or store card details.
• Email: Resend for the emails the site sends, such as booking confirmations, and our email provider for our correspondence with you.
• Booking system: Hospitable. It holds availability, bookings and guest messages for the platforms where we list the villas.
• Form spam protection: Cloudflare Turnstile, which checks that a form is sent by a person and not a bot.
• Weather: Open-Meteo. The home page shows today's weather and sea from Open-Meteo, which receives your IP address, like any site you visit.
• WhatsApp (Meta): only if you choose to message us on WhatsApp.
• The villa owner, for your booking, and their accountant for the declarations the law requires.
• The people who prepare the house (cleaning and welcome): only your name, arrival date and time, and the number of guests.
• A lawyer, only if you ask us to put you in touch.
• Public authorities, when the law requires it.

Each provider processes the data only for the purpose described here.

Some of these providers, such as Stripe, Resend, Hospitable, Cloudflare and Meta, are based in the US or may process data there. In that case the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Enquiries that don't lead to a booking or an agreement: up to two years after our last contact, then deleted.
• Bookings, invoices and payment records: for as long as Greek tax and accounting law requires.
• Owner, buyer and seller contacts: while we work together, and up to two years after our last contact.
• Identity documents: we don't ask for or keep copies of passports or ID cards for villa stays.

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time. Write to us at the email above and we reply within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).

We don't use advertising or analytics cookies. Read our cookie policy.