Privacy
Policy

When you make a booking, we collect:

• Your full name
• Your email address
• Your phone number (optional)
• Number of guests and special requests you write to us
• Check-in and check-out dates and the room you select

When you use our contact form, we collect your name, email address and the contents of your message.

We do not collect payment card details on this website — all bookings are paid for in person at reception when you arrive.

We also collect basic technical data automatically when you visit the site (IP address, browser type, pages visited), used only to keep the site running and secure.

We use your information only for the following purposes:

• To process and confirm your booking
• To send you booking confirmations, modifications, and cancellation notices
• To respond to messages you send through the contact form
• To meet our legal obligations (e.g. guest registration required by Georgian law)
• To prevent fraud and abuse of our booking system

We do not sell your data, share it with advertisers, or use it for marketing without your consent.

If you are visiting from the European Economic Area, our lawful bases under the GDPR are:

• Contract — processing your booking, sending confirmations.
• Legitimate interest — replying to contact-form enquiries, securing our site.
• Legal obligation — guest registration and tax records required by Georgian law.

Booking records are retained for as long as required by Georgian accounting and tax law (typically six years). Contact-form messages are kept for up to two years for follow-up purposes and then deleted.

We delete or anonymise your data sooner if you request it, except where retention is required by law.

We only share your data with the third-party services we rely on to run the site and the hotel:

• Supabase — hosts our booking database (EU servers).
• Resend — sends booking confirmation emails on our behalf.
• Vercel — hosts the website itself.

Each of these providers acts as a data processor and is contractually obliged to protect your data. We do not share your data with anyone else, except where required by law.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Have your data deleted (where the law allows)
• Object to the way we process your data
• Request a copy of your data in a portable format
• Withdraw consent at any time, where consent was the basis for processing

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

This website uses only essential cookies — for example, to remember your language preference (English or Georgian) so it persists across pages. We do not use tracking cookies, advertising cookies, or third-party analytics that profile you.

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page. Material changes will be announced on the website.