Privacy Policy

Who we are

StayCosta is a holiday-rental management agency based on the Costa del Sol, operating the website staycosta.net. We are the data controller for the personal data described here. You can reach us about anything in this policy at the contact details below.

• Calle Antonio Sedeño Cantos 20, 29640 Fuengirola, Málaga, Spain
• Email: booking@staycosta.net
• Phone / WhatsApp: +34 611 210 817

What we collect and why

We only collect what we need to answer you and run the site securely.

Enquiry and booking-request details

When you send a booking request or contact us, we collect your name, email address, phone number (if you give it) and the message and trip details you provide. We use this solely to reply, check availability and arrange your stay. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries.

Anti-spam protection

When a form is submitted we store a salted, one-way hash of your IP address (not the raw address) plus your browser user-agent string. This lets us detect and block automated spam without identifying you personally. The legal basis is our legitimate interest in keeping the service secure.

Cookies and analytics

We set a small number of essential cookies needed for the site to work, and, only if you consent, optional analytics cookies that help us understand traffic. See our Cookie Policy for the full list and how to change your choice. The legal basis for optional cookies is your consent.

We do not take payments or create guest accounts on this website, so we do not collect card numbers or passwords here. If you go on to book, any payment is arranged separately and handled by our payment provider under its own terms.

Who we share it with

We share your details only where it is necessary to answer you or run the site: with the property owner or local team handling your stay, and with the service providers that host our website, send our email and (with your consent) provide analytics. These providers act on our instructions and are bound to protect your data. We never sell your personal data, and we do not share it for third-party advertising.

How long we keep it

• Enquiries that do not lead to a booking: kept for up to 24 months, then deleted, so we can follow up and handle any later questions.
• Booking-related correspondence: kept for the duration of your stay and for as long as we are legally required to (for example for tax and accounting records).
• Anti-spam hashes and logs: kept for up to 12 months.
• Analytics data: retained only while it is useful, in aggregated form where possible.

Your rights

Under the GDPR and Spanish data-protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data where there is no overriding reason to keep it;
• object to or restrict certain processing;
• receive a copy of the data you gave us in a portable format;
• withdraw consent at any time (this does not affect processing already carried out).

To exercise any of these, email booking@staycosta.net. We will respond within one month. If you are not satisfied, you can complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos (aepd.es).

Keeping your data safe

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and the privacy-by-design choices described above, such as hashing IP addresses rather than storing them in the clear. No website can be completely secure, but we take your privacy seriously and review our measures regularly.

Changes to this policy

We may update this policy from time to time. The current version, with its date, is always the one published on this page. Material changes will be highlighted here.