Privacy Policy | Trunquela

1. What this notice covers

As an editorial catalogue and booking-enquiry directory for premier accommodation, Trunquela takes on a firm duty to protect individual records and to maintain transparency wherever readers interact with the service.

This document sets out what Trunquela collects, how it is organised and used, when it is transferred, and how it is protected when you browse the catalogue, read ratings, register a profile, or submit an accommodation request.

2. What we collect through the service

To return accurate availability, verified assessments, and reliable enquiry confirmations, we handle several categories of record:

Who you are and how to reach you: Your name, title, language preference, country or region, email contact, and telephone details provided during profile creation or enquiry submission.
Reservation preferences: Arrival and departure dates, room and bed configuration, suite category, dietary notes, accessibility requests, and any loyalty membership reference.
Billing verification records: Cardholder identity, partial card indicators, billing address, and processor-issued confirmation tokens. At no point is a full card number retained on Trunquela infrastructure.
Device telemetry and technical metadata: IP address, browser version, operating system, referring pages, time zone, device identifiers, and interaction timestamps.

3. Legal grounds and operational purposes

Processing takes place only under an established lawful ground — contractual necessity, legitimate interest, legal obligation, or consent you have given. Those grounds support the following purposes:

Handling enquiries: Forwarding your stay details to the relevant property so it can respond on availability and prepare for arrival.
Content customisation: Shaping featured rankings and travel guidance around your preferred destinations and resort types.
Security and verification: Keeping the infrastructure secure, verifying that requests are legitimate, and preventing unauthorised access to reader profiles.
Keeping you informed: Sending enquiry updates, confirmations, itinerary reminders, and necessary customer service notices.
Meeting legal obligations: Satisfying accounting disclosure, tax reporting, and other duties imposed by the jurisdictions in which we operate.

4. Disclosure and partners

There is no sale, rental, or leasing of personal identifiers to unrelated commercial entities. Disclosures occur strictly under contractual protection to the parties below:

Partner properties: Resorts receive the guest name, dates, and accommodation specifics strictly necessary to respond to a request or honour a reservation.
Payment processors: Encrypted billing data passes to certified financial gateways operating to current PCI-DSS validation standards.
Technical infrastructure partners: Encrypted database backups sit with tier-1 hosting and content distribution providers to ensure availability.
Authorities where the law requires: Disclosure may follow a valid legal demand, court order, or regulatory mandate, or be necessary to protect someone's vital interests.

5. Digital identifiers and measurement

Digital identifiers and local storage support returning-visitor recognition, preference retention, performance measurement, and session continuity. Control rests with you via browser configuration; blocking essential cookies will impair some features.

6. Security and retention

Protection is layered across administrative, technical, and physical measures: encrypted transport under TLS 1.3, AES-256 encryption at rest, isolated database clusters, and credentials restricted by role.

We retain data only for the time required to fulfil the request, handle follow-up questions, meet audit standards, or comply with a retention schedule set in law. After that, records are deleted or anonymised beyond recovery.

7. Individual rights

Depending on where you live, and after identity verification, you can exercise these rights:

Right of access: Obtain a portable copy of the personal records we hold and confirm how they are being handled.
Rectification: Request prompt correction of profile information that is wrong, partial, or out of date.
Right to erasure: Have your data removed once processing is no longer required by law or by the purpose it served.
Restriction: Limit how we process your data while accuracy or a legitimate interest is being examined.

Choices you can exercise

Control over the collection and use of your personal information rests with you. Where local law provides for it, the following choices apply:

Sale or sharing of personal information: You may opt out of the sale or sharing of your personal information with third parties where laws such as the CCPA/CPRA in California, or comparable legislation elsewhere, provide for it. While we do not sell personal information in the conventional sense, some data may be shared with trusted partners in order to provide or improve the service.
Tracking technologies: Cookies and similar tracking tools can be managed or declined via your browser configuration or the consent controls published on this website.
Marketing messages: Promotional email and newsletters can be discontinued through the unsubscribe link in any message or by contacting us directly.
Consent withdrawal: Any consent you have given may be withdrawn at any point. Doing so does not render unlawful the processing that occurred before withdrawal.

Requests to exercise these rights, or to opt out, can be sent to [email protected] or submitted through our contact form.

8. Changes to this notice

We may update this notice as regulations or our systems change. Significant revisions are published here with a fresh effective date; continuing to use the site afterwards signifies acceptance.