Privacy Policy

What we collect, why, who sees it, and the choices you have.

Last updated 9 October 2026.

Who we are

This website is for StarDust Retreat, a private holiday villa in Davenport, Florida. The person responsible for your personal information (the “data controller”) is Telling LLC , Craig Telling.

Questions about this policy, or requests about your information, can be sent through our contact page.

What we collect and why

Just visiting the site

  • Your IP address and basic technical details (browser, device, pages requested) are processed by our web host so the site can be delivered and kept secure. This is needed to run the site (our legitimate interest).
  • Analytics (only if you agree). If you accept analytics cookies we use Google Analytics to see which pages are visited and how people find the site. Google Analytics does not store full IP addresses. If you reject them, no analytics script is loaded. See the Cookie Policy.
  • Clicks on “Book on Airbnb”. When you click that button we record the date and time, your IP address and the page you were on, so we can see how often visitors go on to book. We keep this record for up to 12 months and then delete it. This is our legitimate interest in understanding how the site is used.

Booking a stay

Stays are normally booked through Airbnb, Vrbo, Dreams United or directly with us. If you book through a platform, that platform passes us your name, contact details, travel dates and the number of guests, and its own privacy policy governs what it does with your data. We use this information to manage your stay (to perform our contract with you): to confirm dates, to email or message you before and after your visit, and to keep our accounts. We may ask for the names of everyone staying and about extras such as pool heating or a BBQ. Booking records are kept for the length of the stay and then for as long as tax and accounting rules require (typically six to seven years).

Enquiries, the guestbook and guest feedback

  • Contact page messages (name, email, message) are saved in our website's admin area and emailed to our management mailbox, so we can reply to you. We use them only for that, and delete them when they are no longer needed.
  • Booking enquiries (name, email, phone, dates, party size, message) are used only to reply to you.
  • Guestbook entries (name, email, message) are checked by us first. Only entries we approve are shown publicly, and your email address is never published. You can ask us to remove an entry at any time.
  • Guest feedback (name, email, message) is private. We read it to improve the villa and it is never published.

We keep these only as long as we need them for the purpose you gave them, and review them periodically.

Staff accounts

The few people who manage the site sign in with an account. We keep the sign-in details needed for that and a record of who approved guestbook entries. This does not apply to ordinary visitors.

Who else handles your information

We do not sell your personal information. We share it only with the services that help us run the site and the stay:

  • Our web host and database provider, which stores the site and its data.
  • Our email service, used to send reminders and messages about your stay.
  • Google — Google Analytics (only with your consent) and Google Fonts, which load from Google's servers so your browser sends them your IP address.
  • Content delivery networks (jsDelivr and Cloudflare cdnjs) that supply the site's standard design and icon libraries; they also see your IP address when your browser fetches them.
  • Google reCAPTCHA, on the contact page and the FAQ page's contact form only (on the FAQ page, only once you start filling it in), to tell people from automated bots. It runs in your browser and Google receives information such as your IP address and how you interact with the page; Google's privacy policy applies.
  • OpenFreeMap, which supplies the map tiles on The Villa page.
  • Booking platforms (Airbnb, Vrbo, Dreams United) if you book through them or follow their links; their own privacy policies apply from that point.

Some of these providers are in the United States. Where information is transferred outside the UK or EEA we rely on the safeguards those providers offer, such as standard contractual clauses.

Your rights

Depending on where you live (for example under the UK or EU GDPR) you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Where we rely on your consent (analytics cookies) you can withdraw it at any time using . If you live in California or another US state with privacy laws, you have similar rights to know about and delete your information; we do not sell or share personal information for advertising.

To use any of these rights, email us (above). If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to your local data protection authority.

Security and children

We use HTTPS, restrict access to administration tools to named staff, and require approval before any guest content is published. The site is not aimed at children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we change this policy we will update the date at the top. Significant changes will be highlighted on the site.