Privacy Policy

1. Who handles information

Orbit Trip Vacation handles the information you provide for enquiries and reservations through this website, email or WhatsApp. The registered business identity and address must be included in the contact section before this edition is published as an operational policy.

2. Information processed

The form asks for name, email, phone, villa, travel dates, party size, children’s ages and preferences you enter. Do not enter passport, payment card or health information in the request field.

This website package uses a temporary session to retain language and request details between pages. The host may record IP addresses, time, page addresses and device information in operational logs. Logging details depend on the hosting configuration.

3. Purposes & grounds

Information is used to answer requests, check availability, prepare quotes and fulfil agreed reservations. Processing is needed for steps before a contract, performance of a contract and applicable legal obligations.

Optional information is used for your request. Marketing and publication of testimonials require a separate choice or permission; booking agreement does not automatically authorise marketing.

4. When information is shared

The review form does not automatically send email or messages. Choosing WhatsApp or email puts your request details into a message link opened in that service. The app provider may receive or retain data under its own policy; you still press Send in the app to message Orbit.

To arrange or fulfil a booking, Orbit shares only necessary details with property operators, transfer providers, guides or other services you request. Information may also be processed by hosting, communications and payment providers used for the service.

5. Third parties & international transfers

WhatsApp, email, hosting and payment providers may process information in other countries. Provider use and transfer safeguards must follow applicable legal requirements; ask Orbit for provider details where needed.

In the review edition, photographs load from third-party property domains; your browser sends connection information such as IP address to those image servers. Once usage permission is obtained, images should be hosted by Orbit.

6. Retention & security

Form information in this package is stored in a server session, not a booking database. Session duration and cleanup follow hosting settings; session cookies normally end with the browser session. Sent messages have separate retention in communication systems.

Booking and payment records are retained as needed for service, complaints and legal or accounting requirements. Orbit must establish a retention schedule and delete or anonymise information when it is no longer needed.

Access should be limited to authorised people. A personal-data breach is handled and notified according to applicable legal deadlines and requirements. No system is represented as entirely risk-free.

7. Your rights & children

You may request access, correction, deletion or cessation of processing as provided by law, and withdraw consent for consent-based processing. Some information may still be required for legal obligations or an agreed reservation.

Contact Orbit’s official email. We may request proportionate identity verification and respond within applicable legal deadlines. Children’s ages are requested only from a parent or guardian to assess occupancy and suitable services; no child accounts are provided.

8. Cookies, changes & contact

This package adds only the session cookie needed for language, form details and request protection. No analytics or advertising trackers were added in this revision. If tracking services are added, the policy and any required choices must be updated.

The policy version appears above. Material changes must be explained to users as required. For questions or data-rights requests, use the official contact details below.