Privacy Policy
Last updated: 14 October 2025
1. Introduction
This Privacy Policy explains how Miralua (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website, make a booking, or interact with us. By using our website or services, you agree to the practices described here.
Data Controller:
Miralua — operated by Lucia Palmira (KvK: 92147674)
Registered address: The Hague, The Netherlands
Contact: [info@miralua.com]
2. Personal Data We Collect
Identity & contact data: name, email address, phone number, billing address.
Booking & transaction data: selected room, dates, order details.
Payment data: processed securely by our payment provider(s); we do not store full card details.
Communications: messages sent via forms, email, surveys, or social channels.
Usage data: IP address, device/browser type, pages viewed, time on site.
Cookies & similar technologies: as explained in Section 6.
3. How We Use Your Data (Purposes)
To process and manage bookings, orders, and payments.
To provide customer support and respond to inquiries.
To send updates, promotional offers, and newsletters (only with your consent—opt-out anytime).
To improve our website, services, and customer experience (analytics).
To comply with legal obligations (tax, accounting, fraud prevention).
4. Legal Bases for Processing (EU/EEA)
We process personal data based on:
Consent (e.g., marketing emails).
Contract (to provide your booking and related services).
Legal obligation (e.g., tax/record-keeping).
Legitimate interests (e.g., site security, basic analytics), provided your rights do not override these interests.
5. Sharing Your Data
We do not sell or rent your personal data. We may share it with:
Service providers (e.g., website hosting, email, booking & payment processors) who act as processors under GDPR-compliant agreements.
Legal authorities if required by law or to protect our rights.
Event/retreat partners only where necessary to deliver the service and, if applicable, with your consent.
6. Cookies & Tracking
We use cookies (and similar tech) to run our site, remember preferences, and analyze traffic. Where required, we ask for your consent via a cookie banner. You can adjust your browser settings to block cookies, but some features may not work properly. See our [Cookie Policy] for details.
7. International Transfers
If we transfer personal data outside the EEA/UK, we ensure appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place.
8. Data Retention
We keep personal data only as long as needed for the purposes above or as required by law. Typical periods:
Booking/transaction records: up to 7 years (tax/accounting).
Customer communications: up to 2 years after last contact.
Marketing data: until you withdraw consent or after 24 months of inactivity.
We may keep data longer if necessary to establish, exercise, or defend legal claims.
9. Your Rights (EU/EEA)
You may have the right to access, rectify, erase, or restrict your data; to object to processing (including direct marketing); and to data portability.
You can withdraw consent at any time (this won’t affect prior lawful processing).
To exercise these rights, contact us at [info@miralua.com].
You also have the right to lodge a complaint with your local authority; in the Netherlands: Autoriteit Persoonsgegevens.
10. Security
We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure, but we work to safeguard your information.
11. Third-Party Links
Our website may contain links to third-party sites (e.g., social media, partners). Their privacy practices are not covered by this policy. We recommend reviewing their policies.
12. Children
Our services are not intended for individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us to delete it.
13. Changes to This Policy
We may update this policy from time to time. Updates will be posted here with a new “Last updated” date. Significant changes may also be communicated by email or site notice.
14. Contact
Questions or requests about this Privacy Policy:
Email: [info@miralua.com]