1. Privacy Policy

We regard security of your personal data and protection of your privacy to be of the utmost importance. As the operator of this website, Casa Collective Ltd, we would like to inform you on this page which personal data we collect, what your data is used for, and what it means for you when you use our personalised services.

Our website may contain links to websites of other providers which are not covered by this data protection declaration. We have no influence over whether their operators abide by the data protection regulations.

Casa Collective Ltd is the data controller and understands and respects the importance of protecting your personal data. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us, in respect of your relationship with us as a customer or a potential customer. This information may be collected via our website, our contact centres, our questionnaires/surveys, or our social media channels (collectively, our "Services").

Please read the following information carefully. You are responsible for ensuring that the other people that you are acting on behalf of (such as those included with you on a booking), are aware of the content of this Privacy Policy and you have checked with them that they agree to their personal data being given to us to make a booking or other purchase on their behalf.

By making a booking or other purchase or otherwise giving your personal data to us, we will transfer, store, or process it as set out below. We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy and will take appropriate security measures to help protect your personal data from accidental loss and from unauthorised access, use, alteration, and disclosure.

The security of your data also depends on you. For example, where we have given you or where you have chosen a password for access to certain services, you are responsible for keeping this password confidential.

Casa Collective Ltd is the registered owner of the website casacollectivehotels.com.

2. What Types of Personal Data Do We Collect About You and Why?

We collect certain personal data about you and about any other person you include on your booking. The sort of personal data we collect is information that you provide to us, that we collect from you or observe about you, or that we obtain from other sources. We will only collect and use your personal data if at least one of the following conditions applies:

  • We have your consent;
  • It is necessary for a contract with you or to take steps at your request prior to entering into a contract;
  • It is necessary for us to comply with a legal obligation;
  • It is necessary to protect your vital interests or those of another individual;
  • It is in the public interest, or we have official authority to do so; or
  • It is in our or a third-party's legitimate interests and these are not overridden by your interests or rights.

3. Personal Data You Give to Us

When you make a booking or other purchase or enquiry, including by email, post and phone or through social media, we may ask you for your personal details including your name, address, e-mail address and telephone number. We need to collect this information in order to arrange the services you are requesting.

When you request to make a booking, depending on the arrangements you ask us to make for you, we will ask if you have any special requirements and in doing so you may give us special categories of personal data. If you do not want to provide this information, or ask us to stop processing it, we may not be able to provide all or parts of the Services requested. Cancellation charges may apply in such cases.

If you enter a competition or promotion, complete a survey, or report a problem with our Services, we will collect your name, relevant contact information, and any other personal data you choose to give us.

We may ask to see and retain a copy of passport details and other identification documents, for example when you are checking in at the hotel.

If you contact us online, we may keep a record of your correspondence. If you call us by telephone, we may monitor and/or record phone conversations for training and customer service reasons.

If you make a travel search on our website but do not complete a booking, we will keep and use the data you have provided for a limited time and purpose, as described in this Policy.

4. Personal Data We Collect and/or Observe About You

Based on how you have used our Services and your activity on our website, social media channels, or with our contact centre, we collect the following personal data:

  • Details of the services we have provided to you in the past, including previous travel arrangements and related requirements or complaints;
  • Details of your visits to our website (including traffic data, location data and weblogs). We use third-party technology services, such as Google Analytics, to administer these services;
  • Information collected through analytics and advertising cookies (including Google Analytics 4 and Google Signals), where you have consented via our cookie management tool;
  • Details of websites you visited before using a link to our website, pages visited, and time spent on each page;
  • Information about your social preferences, interests and activities;
  • Information or images provided via social channels;
  • Information regarding referral source, payment source, credit bureau information, and transaction details;
  • Additional personal data we may require as you use our Services;
  • Information about your computer or mobile device including IP address, operating system, device location, browser type, and cookie identification numbers — used for system administration and marketing purposes;
  • Images of you taken on our CCTV systems at our premises.

5. Personal Data of Children

The website and Services are not directed to children under the age of majority. We do not knowingly collect personal data from children or other individuals who are not legally able to use our website and Services without a lawful basis for processing.

If we obtain actual knowledge that we have collected personal data from a child under the age of majority without a lawful basis, we will promptly delete it unless legally obligated to retain such data.

Please contact us if you believe that we have mistakenly or unintentionally collected information from a child under the age of majority.

6. Personal Data Obtained from Other Sources

We might also receive your personal data from third-party sources who collect information about you on our behalf. This includes:

  • If you tell a third-party that you would like to receive marketing communications from Casa Collective Ltd, they will securely transfer your contact details and marketing preferences to us;
  • If you book one of our holidays through a third-party travel agent, certain personal data (such as your name, date of birth or special requirements) will be passed to us;
  • If you complete an online review, the information will be processed by a third-party such as Trust You GmbH and provided to us;
  • If you provide feedback via our Instagram or Facebook pages, feedback (but not your personal data) will be processed by Vision Alphabet GmbH ("Alphabet") and passed to us. Alphabet is a digital marketing company used by us to administer reviews and other activity on our social media channels.

7. Personal Data You Provide About Other Individuals

We use personal data about other individuals provided by you in the course of providing you with the Services.

By providing other people's personal data, you must be sure that they agree to this and you are allowed or authorised to provide it. You should also ensure that, where appropriate, they understand how their personal data may be used by us.

8. Where Your Data Is Stored and Who It's Shared With

Your personal data is held on a combination of our own systems and systems of the suppliers we use to provide our Services. When you give your personal data to us, some of it will need to be given to and processed by relevant third parties, including:

  • Our technology and data management partners (such as Busy Rooms Group who provide central reservation services);
  • Our contact centre (including 'live chat forum') partners who provide customer enquiry support;
  • An organisation we sell or transfer any of our businesses or rights to — the receiving organisation may use your data in the same way as us;
  • Our travel partners, such as hoteliers and insurance companies, to provide you with the arrangements you require.

We may also share personal data to establish, exercise or defend our legal rights, including for fraud prevention and credit risk reduction. If false or inaccurate information is identified as fraud, the details will be passed to fraud protection agencies and may also be shared with law enforcement agencies.

Some third parties may be based outside the UK, EU or EEA. We aim only to transfer your data to such third parties where either:

  • Your personal data will be subject to appropriate safeguards such as standard contractual clauses or binding corporate rules approved by regulators; or
  • The transfer is necessary to enable your contract to be performed.

9. How Do We Use Your Information When Providing Our Services?

We use your information for a range of purposes, including:

Customer Experience

  • To allow you to participate in interactive features of our website;
  • To ensure that content is presented effectively for you and your device;
  • To notify you about changes to our service.

Business Protection

  • To protect our business against financial loss;
  • For debt collection or credit vetting;
  • For payment card and booking verification;
  • To maintain a safe and secure environment and prevent and detect criminal activity;
  • Using CCTV in our premises.

Business Improvement & Marketing

  • Sending marketing correspondence about products and services similar to those you have previously purchased. You may opt out at any time;
  • Contacting you if you made an enquiry but did not complete a booking, to check if you need assistance;
  • Inviting customers to take part in surveys or discussion groups;
  • Using aggregated customer data to analyse booking trends and behaviours;
  • Targeted advertising delivered online using Google DoubleClick and through social media and other platforms;
  • Creating Custom Audiences and Lookalike Audiences on platforms such as Google, Meta (Facebook/Instagram) and others. Your email address or phone number is securely hashed before being shared with these platforms, which use it solely to match records or identify similar users for relevant advertising.

Legal Requirements

  • Resolving complaints, dealing with disputes and legal proceedings;
  • Responding to requests from government bodies, law enforcement agencies, courts or regulatory authorities;
  • For anti-money laundering and terrorist financing purposes.

10. Additional Data Provisions for Banking Transactions (EEA)

In the event that the Services include a banking transaction, additional data regulations apply. Please refer to Schedule 1 of this Privacy Policy for further details.

11. WHEN AND HOW DO WE USE YOUR INFORMATION FOR MARKETING?

11.1 If you have made an enquiry or purchase on our website, or contact centre,your personal data may be used by us in the ways the law allows, to contact youby post, electronic means (e.g. e-mail or text message) and/or by phone withinformation and offers relating to products or services that you canbook/purchase from CASA COLLECTIVE LTD . We will only do this if you didnot opt out of such marketing at the point where we collected your contactdetails.

11.2 If you have not made an enquiry or purchase, we will only send youinformation and offers by e-mail or text message if you sign up (opt in) toreceive such marketing, either directly through us or by telling a third-party thatyou would like to receive marketing from us.

11.3 The type of products and services that can be booked/purchased throughCASA COLLECTIVE LTD are shown below. You will only receive marketingcommunications about those which we think are relevant to you:

  • 11.3.1 travel and travel related services from our Group companies;
  • 11.3.2 third-party products services which you can book through us;
  • 11.3.3 holidays and travel arrangements from a CASA COLLECTIVE LTD website;
  • 11.3.4 transfers;
  • 11.3.5 holiday extras (for airport parking and hotels and car hire); and
  • 11.3.6 excursions.

11.3.6 excursions.

11.4 We will not pass your contact details to a third-party that is not one of ourbusiness partners involved in providing CASA COLLECTIVE LTD services or products for them to contact you or send you marketing communications unless you have expressly agreed that we may do so.

12. HOW DO WE PERSONALISE OUR MARKETING TO YOU?

12.1 To try and ensure that our marketing communications and advertising are relevant to you, we work with third parties to offer a better experience to customers and potential customers.

12.2 Using new technologies and with the help of our advertising agencies and marketing activation platforms, we may use your personal data in the following ways:

  • 12.2.1 to try to ensure any marketing communications we send to you are offering products or services likely to be of interest to you; and
  • 12.2.2 to tailor and track our digital marketing (for example, our internet banner advertisements) and links from our marketing partners’ websites to our website. This digital marketing may include marketing related to CASA COLLECTIVE LTD or marketing related to business partners to whom we provide advertising services.

12.3 Our business partners and advertising networks may serve you with non-personalised adverts on our website via advertising technology Google Double Click for Publishers. Non-personalised adverts are targeted using contextual information regarding the pages visited on our site, rather than the past behaviour of a user. We allow third parties to collect information about your online activities using cookies and other technologies. The third parties may include other CASA COLLECTIVE LTD Group companies, our suppliers/business partners who collect information when you view or interact with an advert on our website and advertising networks. We also collect information about your online activities using cookies and other technologies when you use websites other than our website to provide advertising services on behalf of our business partners. This technology allows us to display an advert to you relating to a business partner on other websites based on your page visits and other behaviours whilst on our website.

12.4 Please see our Cookies Policy for more information.

13. What You Need to Do If You Don't Want Our Marketing Communications

We understand you might no longer want to hear from us and that is okay. You have the right at any time to ask us not to process your personal data for marketing purposes. You can:

  • Select the 'no marketing' option on the forms we use to collect your data;
  • Use the unsubscribe link on any marketing email you receive;
  • Follow the opt-out instructions in any direct marketing communication sent by post; or
  • Send an unsubscribe request to connect@casacollectivehotels.com.

Please note: when you unsubscribe from marketing in respect of holiday and travel services, this opt-out will apply only to Casa Collective Ltd marketing communications.

14. Your Rights in Relation to Any Personal Data We Hold About You

You have a number of rights in relation to your personal data under data protection law:

Right to Access Your Personal Information
Right to Rectification
Right of Erasure
Right to Restriction of Processing
Right to Object to Processing
Right to Data Portability

15. Transferring Your Personal Information in a Structured Data File

Where we rely on your consent as the legal basis for processing your personal data or need to process it in connection with your contract, you may ask us to provide you with a copy of that information in a structured, commonly used and machine-readable format. Please contact our data protection team to make such a request.

16. Data Subject Access Requests

You have the right to request a copy of the personal data we hold about you. In most cases, access is provided free of charge. However, if requests are manifestly unfounded or excessive, we may charge a reasonable fee based on administrative costs.

Once you have made your request and provided us with the information we need (including proof of identity), we will have 30 days to respond.

17. HOW TO CONTACT US

17.1 You have a right to ask for a copy of the personal data we hold about you, although you should be able to access online the personal data associated with your account or booking.

17.2 Please include any details to help us identify and locate your personal data. Where we can provide data access, we will do so free of charge except where further copies are requested in which case we may charge a reasonable fee based on administrative costs.

17.3 You can also contact us if you have a complaint about how we collect, store or use your personal data. We aim to resolve complaints but if you are dissatisfied with our response, you may complain to the Information Commissioner’s Office. To contact us about this Privacy Policy, to make a Data Subject Access Request, or a data protection related complaint, please submit your complaint or request. Any subject access request can be made in writing to:
CASA COLLECTIVE LTD
Suite 4 7th Floor, 50 Broadway, London, England, SW1H 0DB

17.4 Alternatively you can make a subject access request by e-mail to: connect@casacollectivehotels.com.

17.5 Once you have made your request and provided us with the information, we need to begin a search for the data we hold on you (including proof of identity), we will have 30 days to respond.

18. Keeping Hold of Your Personal Data

Where you have made a booking or other purchase with us, your personal data will be retained to ensure we provide the best possible customer service to you. We retain your personal data for as long as is necessary for us to use your data as set out in this Privacy Policy. This will generally be:

  • Up to 7 years in relation to bookings/purchases;
  • 2 years since you last engaged with us after receiving a marketing communication;
  • Or such other time as may be required for our legal and audit purposes.

After this period, we will securely erase your personal data. If personal data is needed for analytical, historical, or other legitimate business purposes beyond this period, we will take appropriate measures to anonymise it.

19. What Happens When You Follow a Link from Our Website to a Third-Party Website?

Our website includes links to other websites which include privacy policies of their own. You can tell when a third-party is involved in supplying a product or service because their name will appear with ours.

Please note that these websites have their own privacy policies and we do not accept any responsibility or liability for these policies or for these third-party websites. Please check these policies before you submit any personal data to these websites.

20. Social Media Features

Our Services may contain social media features such as Facebook and Instagram that have their own privacy notices. Please make sure you read their terms and conditions and privacy notices carefully before providing any personal data, as we do not accept any responsibility or liability for these features.

21. Changes to This Privacy Policy

This Privacy Policy replaces all previous versions. We reserve the right to update or alter this Privacy Policy from time to time, so please check it regularly on our website for any updates. You can request a copy of a previous version of our Privacy Policy.

If the changes are significant, we will obtain your consent or provide a prominent notice on our website where required by applicable data protection laws.

22. How to Complain

Casa Collective Ltd is committed to working with you to obtain a fair resolution of any complaint or concerns about privacy. If you believe that Casa Collective Ltd has not been able to assist with your complaint or concern, you have the right to make a complaint to the relevant supervisory authority:

Information Commissioner's Office (United Kingdom)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113

European Commissioner's Office
European Commission, Secretary-General
B-1049 Brussels, Belgium
(or the EU Commission office in your country)

Schedule 1 – Additional Provisions for Banking Transactions in the EEA

In order to provide the Services, certain of the information we collect (as set out in this Privacy Policy) may be required to be transferred to other related companies or other entities, including those referred to in this section in their capacity as payment providers, payment processors or account holders (or similar capacities).

You acknowledge that according to their local legislation, such entities may be subject to laws, regulations, inquiries, investigations, or orders which may require the disclosure of information to the relevant authorities of the relevant country.

Your use of the Services constitutes your consent to our transfer of such information to provide you the Services.