New guide, The Luxury Resort Direct-Booking Playbook: win back margin from the OTAs. Get it free →

Hirundo

Privacy policy

Last updated: August 1st 2026

This Privacy Policy explains how Hirundo ("we", "us", "our") collects, uses, shares and protects your personal information when you visit https://hirundo.global or otherwise interact with us. We are committed to handling your personal information responsibly and in accordance with the EU General Data Protection Regulation (GDPR) and applicable data-protection laws.

1. Who we are

Hirundo is the data controller responsible for your personal information.

  • Company: Hirundo
  • Registered address: [Company Address]
  • Company registration number: [Company Registration Number]
  • Email: hello@hirundo.global

We have not appointed a dedicated Data Protection Officer, but any privacy question can be sent to the contact details above and will be handled promptly.

2. Scope of this policy

This policy applies to the personal information of website visitors, registered users and customers across all interactions with us, whether online or offline.

3. Information we collect

We aim to collect only the information we need. Depending on how you interact with us, this may include:

  • Identity and contact details, such as your first and last name, email address and/or phone number, and company name;
  • Content you submit, such as messages sent through our contact or booking forms;
  • Technical and usage data, such as browser type and language, device information, IP address, pages viewed and referring source, collected through cookies and similar technologies.

4. How and why we use your information

We process your personal information for the following purposes, each supported by a legal basis under the GDPR:

  • To respond to and communicate with you, on the basis of your consent or our legitimate interest in answering your enquiries;
  • To provide and improve our services, on the basis of performance of a contract or our legitimate interests;
  • For marketing and advertising, on the basis of your consent, which you may withdraw at any time;
  • For analytics and performance measurement, on the basis of your consent and/or our legitimate interest in understanding and improving our website;
  • To comply with legal obligations, where processing is required by applicable law.

5. Cookies and tracking technologies

We use cookies and similar technologies to operate our website, remember your preferences, measure performance and support marketing. We use the following categories:

  • Essential cookies, required for the site to function; no consent needed;
  • Performance / analytics cookies, help us understand how the site is used;
  • Functional cookies, remember your choices and preferences;
  • Advertising / targeting cookies, used to deliver and measure marketing.

On your first visit you are shown a consent banner where you can accept all cookies, reject non-essential cookies, or customise your preferences. You can change your choices at any time via the cookie settings on our website.

6. Sharing your information

We do not sell your personal information. We may share it with trusted third-party service providers (for example hosting, analytics, email and advertising platforms) who process it on our behalf. Each such provider acts under a Data Processing Agreement that requires an equivalent level of protection and GDPR compliance. We may also disclose information where required by law.

7. International data transfers

Where personal information is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

8. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy, to comply with our legal obligations, resolve disputes and enforce our agreements. When it is no longer needed, we securely delete or anonymise it.

9. How we protect your information

Your information is stored on secure servers operated by reputable hosting providers using appropriate technical and organisational security measures. While no method of transmission or storage is completely secure, we take reasonable steps to protect your data against unauthorised access, loss or misuse.

10. Your rights under the GDPR

Subject to applicable law, you have the right to:

  • Access your personal information (Art. 15);
  • Request rectification of inaccurate data (Art. 16);
  • Request erasure ("right to be forgotten") (Art. 17);
  • Request restriction of processing (Art. 18);
  • Data portability (Art. 20);
  • Object to processing (Art. 21);
  • Withdraw consent at any time (Art. 7(3));
  • Lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, contact us at [Contact Email]. We may need to verify your identity before responding. You also have the right to complain to your local supervisory authority ([Supervisory Authority]).

11. Children's privacy

Our website and services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Third-party links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date revised accordingly.