Thalatta Bay

Eloúnda 72053 · Lasíthi, Crete, Greece

Legal

Privacy Policy

Last updated: August 2026

Thalatta Bay Resort & Spa ("we", "us") respects your privacy. This page explains what information we collect when you browse this website or use the booking form, how we use it, and the choices you have.

Information we collect

When you use the booking or contact forms, we collect the details you provide, such as your name, email address, phone number, and stay dates. Payment details are entered directly into Stripe's secure payment form and are not stored on our servers. We also collect basic technical data such as your browser type and, if you consent, anonymous analytics about how pages are used.

How we use your information

We use this information to process reservations, respond to enquiries, and operate the website. With your consent, we also use anonymous analytics to understand how visitors use the site so we can improve it.

Cookies

We use strictly necessary cookies to run the site, including remembering your cookie preference. With your consent, we also use optional analytics cookies. You can accept, reject, or change these choices at any time from the cookie banner or the "Cookie Preferences" link in the footer.

Sharing with third parties

We share booking and payment details with Stripe, our payment processor, solely to process payments. We do not sell your personal information to anyone.

Data retention

We keep booking and enquiry information for as long as needed to fulfil your reservation and meet our legal and accounting obligations, then delete or anonymise it.

Your rights

Under EU data protection law, you can ask to see, correct, or delete the personal information we hold about you, or object to how it is used. To exercise these rights, contact us using the details below.

Contact us

Questions about this policy can be sent to the email address listed on our Contact page.