Your information
Privacy Policy
A clear explanation of how personal information is handled when you visit or contact Atlantic Heritage Luxury Villa.
Last updated: 13 September 2026
Who is responsible for your data?
Atlantic Heritage Unipessoal Lda is the controller of personal data processed directly through this website. Contact: info@atlanticheritagevilla.com. Address: 29 Canada Nova, 9950-230 Criação Velha, Pico Island, Azores, Portugal.
Information we may process
This website does not provide user accounts. When you enquire, email or use WhatsApp, we may process your name, email address, intended arrival and departure dates, message and reservation information you choose to provide.
Hosting and security services may process standard technical logs, including IP address, time, requested page, browser information and security events.
AI assistant: use of information and privacy
The AI assistant is optional. It answers questions about the villa and provides indicative stay estimates from our published information. It does not confirm live availability or create a reservation; your confirmed booking and its terms govern.
To answer you, your message, recent conversation history, page address and language are processed through Cloudflare and OpenAI. This can include travel dates, guest numbers and children’s ages that you provide. Give ages at check-in, rather than dates of birth, and do not enter payment details, passport information or other sensitive data.
Our application keeps the conversation in memory on the current page and does not automatically email it to the villa team or send its contents to Google Analytics or advertising services. OpenAI response storage is disabled for our API requests. This does not mean zero retention: OpenAI may retain security and abuse-monitoring records for up to 30 days, or longer where required by law or necessary for safety, and temporary processing caches may apply. Under OpenAI’s default API policy, data is not used for model training unless the account operator opts in.
Only if you choose “Email conversation” will FormSubmit receive the transcript, page address, session reference and timestamps for delivery to info@atlanticheritagevilla.com after its security check. FormSubmit retains submissions for 30 days. We keep emailed enquiries only as long as needed to respond, support a booking and meet applicable obligations.
Hosting and service providers may process technical security information and data outside your country. Their privacy notices apply alongside ours. You can contact the villa directly without using the assistant, and contact info@atlanticheritagevilla.com about access, correction, deletion or other data rights.
Why we use information
We use personal information to answer enquiries, provide requested information, take steps before a possible reservation, perform a booking, communicate with guests and operate and protect the website.
Depending on the context, processing relies on pre-contractual steps, performance of a contract, legal obligations or legitimate interests in guest communication and website security.
Bookings, forms and external services
Reservations are completed on the secure Amenitiz booking page. Enquiry forms may be delivered through FormSubmit. Links may open Google Maps, WhatsApp, Instagram or TikTok. Each external provider processes information under its own terms and privacy notice.
Cookies and analytics
We use Cloudflare Web Analytics, a privacy-focused service, to measure page views, visits, referral sources, approximate country, browser and device type, and website performance. It does not use analytics cookies or create advertising profiles. Cloudflare processes limited technical measurement data for this purpose. Essential technical storage may be used where necessary to deliver and protect the service. External sites may use their own cookies.
Optional Google Analytics is loaded only after you accept analytics in our privacy choices. It uses first-party cookies to measure page visits, referral sources, device information, booking-link clicks, contact-link clicks and enquiry-form handoffs. A form handoff is not confirmation that an enquiry was delivered or a booking completed. We do not send form contents or assistant conversations to Google Analytics, and advertising features are disabled.
Google processes the measurement data under its privacy policies, potentially outside your country. We remember your choice for up to 180 days. You can withdraw or change it at any time using “Privacy choices” on this privacy policy page; withdrawing stops our Analytics measurements and removes the Analytics cookies accessible to this website on your device. Your choice does not affect access to the villa website or booking services. Google privacy policy.
Sharing and retention
Information is shared only with providers supporting hosting, communications, security or reservations where necessary, or where required by law. We retain it only for as long as reasonably necessary for the enquiry, reservation, security purpose and applicable legal or accounting requirements.
Your rights
Subject to the GDPR, you may request access, correction, deletion, restriction or portability, object to certain processing, or withdraw consent where consent applies. Email us to exercise a right. You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
Changes and contact
We may update this notice when the website, our services or legal requirements change. The date shown identifies the latest version. Privacy questions should be sent to info@atlanticheritagevilla.com.