Privacy Policy

1. Introduction

This Privacy Policy explains how Pixel Analytics LLC ("HOTEVI", "we", "our", or "us"), operating the website Hotevi.com, collects, uses, stores, and protects personal information when you use our hotel booking platform. By using our services, you agree to the practices described in this policy.

---

2. Information We Collect

Information You Provide

• Booking information: your full name, email address, and phone number when making a reservation
• Guest details: names of other guests in your party as required for the hotel reservation
• Contact enquiries: name, email, and message when you contact us via the contact form or email

Payment Information

Payment card details are processed by Stripe, a PCI-DSS Level 1 certified payment processor. HOTEVI does not receive, store, or have access to your full card number, CVV, or payment credentials. We receive only a transaction confirmation and the last four digits of your card for reference.

Automatically Collected Information

• Device and browser information: IP address, browser type and version, operating system, referring URL
• Usage data: pages visited, search queries, time on site, clicks — collected via Google Analytics
• Session data: temporary session tokens used to maintain your booking session (deleted after 2 hours of inactivity)
• Cookies: see Section 7 for details

---

3. How We Use Your Information

We use your personal data for the following purposes:

• Fulfilling your booking: processing your reservation, transmitting booking details to the hotel, and sending your confirmation email
• Customer support: responding to enquiries, handling cancellation and refund requests, and resolving disputes
• Payment processing: creating and processing Stripe payment intents for your booking
• Security and fraud prevention: rate limiting, anomaly detection, and protecting against fraudulent transactions
• Legal compliance: retaining booking records for the period required by applicable financial and tax laws
• Analytics and improvement: understanding how our platform is used to improve functionality and user experience
• Marketing: sending promotional emails where you have not opted out. You can unsubscribe at any time.

---

4. Information We Share

We do not sell, rent, or trade your personal information. We share data only as described below:

Hotel and Booking Supplier

Your booking details (guest names, email, phone, check-in/out dates, room type) are transmitted to our hotel supplier network (Travellanda) and the hotel property to fulfil your reservation. This is a necessary condition of making any booking.

Payment Processor

Stripe processes your payment. Your interaction with Stripe's payment form is governed by Stripe's Privacy Policy.

Analytics Providers

We use Google Analytics 4 and Google Tag Manager to analyse site usage. Data shared with Google is aggregated and anonymised where possible. You can opt out via Google's browser opt-out tools.

Legal Requirements

We may disclose personal data when required by law, court order, or to protect our legal rights.

---

5. Data Retention

• Booking records: retained for 7 years for legal and financial compliance purposes
• Session data: deleted automatically after 2 hours of inactivity
• Rate limit records: deleted after 1 hour
• Admin and system logs: retained for 90 days
• Contact form submissions: retained for 12 months then deleted

---

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate data
• Deletion: request deletion of your personal data (subject to legal retention requirements)
• Portability: request your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Marketing opt-out: unsubscribe from marketing emails at any time

To exercise any of these rights, email info@hotevi.com with the subject Data Request. We will respond within 30 days.

---

7. Cookies and Tracking

HOTEVI uses the following types of cookies and tracking technologies:

• Session cookies (hv_session): secure, HttpOnly cookies used to maintain your booking session. Expire after 30 minutes.
• Affiliate tracking (hv_ref): first-party cookie storing affiliate referral code if you arrived via an affiliate link. Expires after 30 days.
• Analytics cookies: Google Analytics collects anonymised data about site usage. You may opt out via your browser settings or Google's opt-out tool.
• Advertising cookies: Google Ads and Meta Pixel may set cookies for conversion tracking when you arrive via an advertisement.

---

8. Data Security

We take data security seriously. Measures in place include:

• SSL/TLS encryption for all data in transit
• Database encryption and strictly limited access controls
• Stripe PCI-DSS compliant payment processing (card data never touches our servers)
• Rate limiting and session expiry to prevent unauthorised access
• Regular security review of application code and infrastructure

No system is completely secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

---

9. International Data Transfers

HOTEVI is based in the United States. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with data transfer restrictions, please be aware that your data may be transferred to and processed in the United States. We implement appropriate safeguards for any such transfers.

---

10. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@hotevi.com.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via a notice on our website. Continued use of our services after a change constitutes acceptance of the updated policy.

---

12. Contact Us

For any privacy-related questions, data requests, or concerns: