Privacy Policy

Who we are

Luminous Vacation Rentals is a worldwide short-term rental management company, with a specialty in the Caribbean. We provide marketing, dynamic pricing, guest experience, and housekeeping services for property owners.

For any privacy question or request, contact us at hello@itsluminous.ca. If you are in the EEA, UK, or a jurisdiction that requires it, you may treat this contact as our data-protection point of contact.

Information we collect

We collect information in three ways: information you give us, information collected automatically when you use our site, and information we receive from third parties.

• Information you provide - your name, email address, phone number, property location, and any message when you use our contact form, request a consultation, or email us.
• Booking & guest information - when a stay is booked through our site: guest name, email, phone, stay dates, number of guests, and the amount charged.
• Payment information - card payments are processed by our payment provider (Stripe). We do not receive or store full card numbers; we retain a payment reference, amount, and status for reconciliation.
• Newsletter - if you subscribe, your email address (and your consent) so we can send you updates. Managed through our email provider (Brevo).
• Property-owner information - for owners we work with: contact details, tax/invoicing details, and information about your property, some of which is synchronized from our property-management platform (Hostaway).
• Automatically collected - basic technical data such as IP address, browser/device type, pages viewed, and referring pages, plus cookies and similar technologies (see “Cookies” below).

How we use your information

We use personal information to:

• Respond to your enquiries and provide the consultation or services you request.
• Create, confirm, and manage reservations, and take and reconcile payments.
• Provide our management services to property owners, including reporting.
• Send you our newsletter and service updates where you have opted in, and let you unsubscribe at any time.
• Operate, secure, maintain, and improve our website and services, and prevent fraud and abuse.
• Comply with our legal, tax, and regulatory obligations.

Legal bases for processing (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide bookings and services you request); your consent (for example, newsletter sign-ups and certain cookies), which you can withdraw at any time; our legitimate interests (to run, secure, and improve our business) balanced against your rights; and compliance with a legal obligation.

How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf, and only as needed to provide our services:

• Hostaway - our property-management platform, used to manage listings, calendars, and reservations.
• Stripe - to securely process card payments.
• Brevo - to manage newsletter subscriptions and send email.
• Hosting & infrastructure - our website host (Vercel) and database provider (Neon), which store data on our behalf.
• Google - appointment scheduling for consultation calls.
• Professional advisers, and authorities where required by law, or to protect our rights, safety, and property.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you.

International transfers

We operate worldwide, and our service providers may process your information in countries other than your own, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

How long we keep it

We keep personal information only for as long as necessary for the purposes described in this policy - for example, to manage your booking or owner relationship, meet our legal, tax, and accounting obligations, and resolve disputes. Contact and booking records are typically retained for the duration of our relationship and a reasonable period afterwards; newsletter data is kept until you unsubscribe.

Cookies & similar technologies

We use a small number of cookies and similar technologies to make the site work, remember your preferences (such as your display currency), and understand how the site is used so we can improve it.

Some pages include third-party components - such as the Stripe payment element and the Google appointment scheduler - that may set their own cookies. You can control cookies through your browser settings; blocking some cookies may affect how parts of the site work.

Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access - request a copy of the information we hold about you.
• Correction - ask us to correct inaccurate or incomplete information.
• Deletion - ask us to delete your information, subject to legal exceptions.
• Restriction & objection - ask us to restrict or object to certain processing.
• Portability - receive certain information in a portable format.
• Withdraw consent - where we rely on consent, withdraw it at any time (this does not affect prior processing).
• Complain - lodge a complaint with your local data-protection authority.

US state privacy rights

If you are a California resident (or in another US state with similar laws), you have the right to know what personal information we collect and how we use it, to request access or deletion, and to not be discriminated against for exercising your rights. We do not sell your personal information or share it for cross-context behavioral advertising. To exercise these rights, contact us at hello@itsluminous.ca.

Marketing & newsletter choices

We only send you marketing emails, including our newsletter, where you have opted in. Every email includes an unsubscribe link, and you can also opt out at any time by contacting us. Service messages relating to a booking or your account are not marketing and may still be sent.

Children

Our website and services are intended for adults and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Security

We use appropriate technical and organizational measures to protect personal information, including encryption in transit and access controls, and we work only with reputable service providers. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information.

Third-party links

Our website may link to third-party sites and services we do not control. This policy does not apply to those sites; we encourage you to review their privacy policies.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will take additional steps where required by law. Please review this page periodically.

Contact us

If you have any questions about this policy or how we handle your information, or to exercise your rights, contact us at hello@itsluminous.ca. We will respond within the time required by applicable law.