Casa Indalo Privacy

What we keep

and nothing else

One list, one purpose: to tell you once when there are dates to book.

If you have given us an address, this is the whole of what sits against it. There is no profile, no tracking, and no advertising.

  • Your email address To write to you once
  • The date you signed up Record of consent
  • The wording you agreed to Record of consent
  • Which page you used To know what worked
  • Your country Curiosity, nothing more
  • A one-way hash of your IP To stop bulk sign-ups

That last one is worth explaining. We do not store the address your connection used. We store a salted SHA-256 hash of it, which cannot be turned back into the original and is only ever compared against other hashes to spot a machine signing up eight hundred times. We could not tell you your own IP address from it.

Why we may keep it

the lawful basis

Consent, under Article 6(1)(a) of the UK and EU GDPR. You gave an address to a form that said what it was for. That is the only basis we rely on for the mailing list, which is why the way off it has to be as easy as the way on.

How long

not forever

Until the house opens and we have written to you, plus a year in case you want to hear about the following season. After that the address is deleted. If the house never opens, the list is deleted and you will hear that too.

Who sees it

short list

The list lives in a Cloudflare D1 database in Western Europe. Cloudflare serve this site and therefore process requests to it. Nobody buys, rents or receives this list, and it is not shared with any booking platform.

When booking opens, the booking itself will be handled by Hospitable, and their own privacy terms will govern what you give them at that point. That is a separate thing from this list, and this page will say so plainly before it happens.

Cookies

none

This site sets no cookies at all.

There is no analytics, no pixel, no consent banner, because there is nothing to consent to. Fonts are served by Google, which means your browser asks them for the files. Nothing else leaves this page.

Your rights

exercisable today

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. There is no charge and no form to fill in beyond the one below. Deletion is immediate and total: the row goes, rather than being marked as gone.

For anything else, write to [email protected] and you will hear back from a person. If you think we have handled your data badly you can complain to the ICO in the UK, or to the AEPD in Spain.

Who we are

the operator
  • Property Casa Indalo, Mojácar, Almería
  • Contact [email protected]
  • Tourist registration [VFT PENDING]

Last updated 19 September 2026.