Privacy Policy | Fulmareta

1. Scope and application

Fulmareta operates as an editorial directory and enquiry service covering resort hotels and hospitality destinations. Protecting the personal information readers entrust to us, and being transparent about how it is handled, is a standing obligation across every part of the service.

What follows describes how Fulmareta collects, structures, uses, shares, and secures your details as you navigate the catalogue, review destination ratings, set up a guest profile, or complete an accommodation request.

2. What we collect through the service

Delivering accurate lodging information, verified reviews, and dependable enquiry handling requires us to process the following categories:

Personal identity and contact information: Full name, form of address, preferred language, region of residence, email address, and any telephone number you supply when registering or submitting an enquiry.
Reservation preferences: Dates of travel, room configuration and category, bedding selection, dietary and accessibility requests, and loyalty programme identifiers.
Billing and payment confirmation records: Cardholder name, truncated card indicators, billing address, and transaction confirmation tokens handled by accredited payment processors. Full card numbers are never stored on Fulmareta servers.
Technical metadata: IP address, browser version, operating system, referring pages, time zone, device identifiers, and interaction timestamps.

3. Legal grounds and operational purposes

Fulmareta processes records only where a recognised legal basis applies: performance of a contract, legitimate business interest, compliance with a statutory duty, or your explicit consent. The operational purposes are:

Enquiry fulfilment: Relaying your dates and requirements to the property's reservations desk so it can answer with current availability.
Editorial personalisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Security and verification: Keeping the infrastructure secure, verifying that requests are legitimate, and preventing unauthorised access to reader profiles.
Keeping you informed: Issuing reservation updates, confirmation vouchers, itinerary reminders, and essential service notifications.
Regulatory compliance: Fulfilling financial disclosure rules, tax obligations, and other legal mandates that apply to our operations.

4. Authorised disclosures

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

The hotels themselves: Selected properties are given only the name, arrival dates, and room details required to answer an enquiry or hold a room.
Certified payment gateways: Encrypted billing data passes to certified financial gateways operating to current PCI-DSS validation standards.
Technical infrastructure partners: Enterprise-grade data centres and delivery networks store encrypted backups to maintain uptime and disaster resilience.
Legal and regulatory authorities: We disclose where compelled by subpoena, court order, or statutory mandate, or where vital individual interests are at stake.

5. Cookies, storage, and analytics

We use cookies and local storage to recognise returning readers, retain display preferences, measure performance, and keep sessions intact. Browser settings give you full control over these, though disabling essential cookies will limit parts of the enquiry process.

6. Security and retention

Layered administrative, technical, and physical controls protect records against unauthorised access, loss, alteration, or extraction. These include TLS 1.3 in transit, AES-256 at rest, segregated database clusters, and role-restricted credentials.

We retain data only for the time required to fulfil the request, handle follow-up questions, meet audit standards, or comply with a retention schedule set in law. After that, records are deleted or anonymised beyond recovery.

7. Your rights

Depending on where you live, and after identity verification, you can exercise these rights:

Access and inspection: Request a transferable copy of your stored records and verify our handling procedures.
Rectification: Request prompt correction of profile information that is wrong, partial, or out of date.
Right to erasure: Ask for records to be deleted where no statutory or contractual basis for keeping them remains.
Restriction: Restrict our use of your data during any dispute over accuracy or over our grounds for processing.

Opt-out and your choices

You have the right to control how your personal information is collected and used. Depending on your location and the laws that apply to you, the following opt-out choices are available:

Sale or sharing of personal information: Under the CCPA/CPRA and equivalent statutes elsewhere, you may refuse the sale or sharing of your personal information with third parties. Although we do not sell personal information in the traditional sense, limited data may reach trusted partners so that we can provide or improve our services.
Tracking technologies: You can manage or refuse cookies and tracking technologies through your browser settings, or through the cookie consent tools provided on this site.
Marketing communications: Promotional email and newsletters can be discontinued through the unsubscribe link in any message or by contacting us directly.
Consent withdrawal: Where you previously consented to processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

To exercise any of these rights, or to make an opt-out request, please contact us at [email protected] or use our contact form.

8. Revisions

Fulmareta may revise this notice to reflect regulatory developments or changes to the service. Material amendments appear on this page with a new effective date, and continued use of the site after publication indicates acceptance of the revised terms.