PRIVACY POLICY
How we handle your data — plainly, and without a cookie banner, because we don't track you.
Last updated: 3 August 2026
WHO WE ARE
The Key Collective ("we", "us") is operated by an individual host based in Athens, Greece, offering short-stay accommodation. For anything related to your personal data, contact us at sp.iosifidis@gmail.com. We are the data controller for the information described below.
WHAT WE COLLECT
When you book: your name, email address, phone number (optional), the dates and property you book, guest count, and any special requests you send us.
When you pay: payment is handled entirely by Stripe on Stripe’s own secure pages. We never see or store your card number. Stripe shares with us only a payment reference, the amount paid, and a token that lets us charge the remaining balance you agreed to.
When you contact us: your name, email address, and message.
When you sign up for updates: your email address and, if given, your name.
When you browse: nothing personal. Our analytics (Vercel Analytics) is cookieless and does not identify or track you across sites.
WHY WE USE IT
To fulfil your booking (contract): confirmations, the balance payment you agreed to, check-in instructions, and communication about your stay.
To meet legal obligations: Greek tax and accounting law requires us to keep records of transactions.
To reply when you contact us (legitimate interest).
To send you occasional offers and updates, only if you have explicitly opted in (consent); you can unsubscribe at any time.
We do not use your data for advertising, we do not profile you, and we never sell it.
WHO PROCESSES IT FOR US
Stripe — payment processing.
Vercel — website hosting, data storage, and cookieless analytics.
Resend — sending booking and enquiry emails.
Calendar synchronisation with Airbnb and Booking.com shares only reserved dates — never your name or contact details.
Some of these providers may process data in the United States under approved safeguards (EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework).
HOW LONG WE KEEP IT
Booking and payment records: up to 5 years after your stay, as required by Greek tax law.
Contact-form enquiries: up to 1 year.
Newsletter sign-ups: kept until you ask us to remove them.
After these periods, records are deleted.
COOKIES
This site sets a single strictly-necessary cookie, used only to keep the site administrator logged in. It is not used for tracking. We set no advertising or analytics cookies — which is why you don’t see a cookie banner here.
YOUR RIGHTS
Under the GDPR you can ask us at any time to: access the data we hold about you, correct it, delete it, receive a copy in a portable format, or object to a use of it. Email sp.iosifidis@gmail.com and we will respond within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).