Privacy Policy | Zonquira

1. What this notice covers

Zonquira is an editorial publication and reservation-enquiry directory for resort accommodation. We treat the safeguarding of personal records, and openness about how we use them, as a core commitment at every point of contact.

This notice covers the collection, organisation, use, transfer, and protection of your information across every part of Zonquira, from browsing ratings to submitting a room request.

2. Categories of information gathered

The following categories are collected so that we can provide accurate availability, verified editorial assessments, and reliable confirmations:

Who you are and how to reach you: Name, salutation, chosen language, residential region, the email address you authorise, and telephone contact points given at registration or enquiry.
Reservation preferences: Dates of travel, room configuration and category, bedding selection, dietary and accessibility requests, and loyalty programme identifiers.
Payment verification data: The cardholder's name, masked card identifiers, billing location, and confirmation tokens issued by certified payment intermediaries. Complete card numbers never reach Zonquira systems.
Device telemetry and technical metadata: Internet protocol address, browser and operating system version, referring URLs, regional time zone, device identifiers, and page interaction times.

3. Lawful bases and purposes

We rely on contractual performance, legitimate interests, statutory compliance, or explicit consent as our lawful grounds. Within those, records serve these purposes:

Handling enquiries: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Editorial personalisation: Presenting hospitality rankings and reviews aligned with the regions and property categories you browse.
Security and verification: Safeguarding digital infrastructure, validating the legitimacy of transactions, and shielding users from unauthorised profile access.
Operational communication: Issuing reservation updates, confirmation vouchers, itinerary reminders, and essential service notifications.
Statutory adherence: Satisfying accounting disclosure, tax reporting, and other duties imposed by the jurisdictions in which we operate.

4. Disclosure and partners

Personal identifiers are never sold, rented, or leased to unaffiliated businesses. Data moves only where a contract governs it, and only to these recipients:

Partner properties: Listed hotels receive the minimum needed — name, travel dates, and room requirements — to process your request.
Certified payment gateways: Billing information travels encrypted to accredited payment gateways that maintain current PCI-DSS validation.
Technical infrastructure partners: Tier-1 data centres and content delivery networks hold encrypted backups so the service stays available and recoverable.
Authorities where the law requires: Information may be released where a lawful subpoena, court order, or official mandate requires it, or to protect vital interests.

5. Cookies and analytics

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Security and retention

We apply multi-layered administrative, technological, and physical defences — TLS 1.3 transport encryption, AES-256 storage encryption, separated database clusters, and access limited by role — to guard against unauthorised access, loss, or alteration.

We retain data only for the time required to fulfil the request, handle follow-up questions, meet audit standards, or comply with a retention schedule set in law. After that, records are deleted or anonymised beyond recovery.

7. Individual rights

Where your jurisdiction provides them, and once we have verified who you are, the following rights are available:

Access: Receive a copy of the data we hold about you, in a portable form, along with an explanation of its use.
Rectification: Request prompt correction of profile information that is wrong, partial, or out of date.
Deletion: Request deletion of your records where we no longer have a legal reason to retain them.
Limiting processing: Pause processing activity while a record's accuracy or our legitimate interest is under review.

Choices you can exercise

You have the right to control how your personal information is collected and used. Depending on your location and the laws that apply to you, the following opt-out choices are available:

Sharing and sale of your data: Where the CCPA/CPRA in California or similar laws in other jurisdictions apply, you can opt out of your personal information being sold or shared with third parties. We do not sell personal information in the ordinary meaning of the term, though some data is shared with trusted partners to deliver or improve the service.
Cookie controls: You can manage or refuse cookies and tracking technologies through your browser settings, or through the cookie consent tools provided on this site.
Marketing communications: Opt out of promotional messages and newsletters using the unsubscribe link in any communication, or by writing to us.
Withdrawal of consent: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Changes to this notice

This notice may be refined periodically in line with legal or architectural change. Any material modification is reflected on this page with an updated date, and further use of the service constitutes acknowledgement.