Privacy Policy
Last updated March 2025Keeping your data safe
At AltoVita we are committed to keeping your personal data safe and secure, and handling it in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think it’s important for you to know.Who we are
Kravluxe Limited trading as AltoVita, specialises in providing temporary accommodation. If you have a query in relation to how your data is processed, you can contact us by email or in writing. Email: Privacy@AltoVita.com Address: 9th Floor, 107 Cheapside, City of London, London EC2V 6DN Registration number: ZB373218Who’s in control
It is important that you understand who is responsible for keeping your data safe. If you are a guest who books directly via our website requiring one of the services we offer, AltoVita will be the Data Controller. If you are a guest/transferee wanting to book one of the available properties via our Business to Enterprise (B2E) platform, AltoVita will be the Data Processor and the company using our B2E platform would be the Data Controller. All data collected by AltoVita is strictly used for the purpose of providing you with the service of finding and providing you with temporary accommodation. As a Data Controller, we are responsible for deciding how and why your data is used and for ensuring that your data is handled legally and safely in a secure manner.
As a Data Processor, we have an obligation to the Data Controller to comply with their requirements to ensure your data is only processed as per the agreed business relationship and for ensuring your data is handled legally and safely in a secure manner, per their requirements.
As a Data Controller or Data Processor, AltoVita will never sell your information to third parties, or process your information for any reason that sits outside of the services you have requested. AltoVita has appointed a Data Protection Officer (DPO) who has ultimate responsibility for making sure your data is treated in accordance with this Privacy Policy and the law.
Our DPO can be contacted by emailing Privacy@AltoVita.com
What data do we collect and where from.
We collect identifiable information about you directly from our website or from our clients via our enterprise platform. By ‘identifiable information’ we mean any information about an individual from which that person can be identified.
We collect data directly from you when you enquire for a property on AltoVita.com or via our B2E platform (Booking Data). This data includes:
- Full name
- Email address
- Date of birth
- Check-in and check-out dates
- Phone number
- Property requirements
- Postcode and address (if provided)
- Direct marketing preferences
- Full name
- Email address
- Company you work for
- Phone number
- Job Title
- Any information you include in your communication
Card payment details are collected directly by our third-party payment provider, Stripe, and are not visible to us.
Their processing is governed by Stripe’s privacy policy: https://stripe.com/gb/privacy.
We collect and analyse information about how you use AltoVita.com using cookies (Behavioural Data). More information can be found in our Cookies Policy.
We also collect data from third-party property suppliers (Third Party Data), including:
- Check-in confirmation
- Damage reports
- Household makeup and composition
- Unique identifier assigned to you
We collect publicly available information from social networking sites such as Facebook, Twitter, YouTube, Instagram, and LinkedIn. This includes likes, shares, tweets and posts related to AltoVita, used for analysis purposes.
Depending on the services required, we may also process:
- Age of spouse and/or children
- Car registration / rental registration
We rely on your explicit consent under Article 9(2)(a) of UK GDPR to process any special category data.
We use Survey Data to analyse insights, improve our services, and build more accurate ad targeting segments.
How do we use your data?
We use your data for the following purposes:Providing you with our services
- To set up, manage, and administer bookings
- To respond to your enquiries or feedback
- To contact you with relevant service messages
Improving our services
- To monitor, analyse, and improve our products and services
- To understand user behaviour and preferences
Marketing and advertising
- To send marketing emails (with your consent)
- To personalise advertisements
- To match databases for targeted campaigns
- To promote our services on third-party platforms such as LinkedIn and Facebook
Profiling and automated decision-making We do not carry out any fully automated decision-making as defined under Article 22 UK GDPR. Any personalisation or segmentation is based on manual input and oversight.
How we use anonymised data We use anonymised and aggregated data for reporting and business analysis. This data cannot identify you.
Who do we share your data with?
We may share your data with the following:- Property suppliers
- Local government or police (where required by law)
- Stripe (for processing card payments)
- Advertising and analytics partners (in anonymised or pseudonymised form where possible)
International data transfers
We may transfer personal data outside the UK or EU to provide our services. Where we do so, we rely on:- Adequacy decisions by the UK or EU
- Standard Contractual Clauses (SCCs)
- Additional safeguards where necessary (e.g. encryption, pseudonymisation)
Children's data
Our services are not directed to children under 18. We only collect age data to tailor your booking, such as requesting a cot. We do not knowingly collect identifiable information from children. If you believe we have, please contact Privacy@AltoVita.com.How long do we keep your data?
- Bookings: up to 6 years after final transaction
- Email marketing: until you opt out
- Job applications: 12 months
- Voluntary Data: retained for 1 year then anonymised or deleted
You have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability (where applicable)
- Right to object
- Right not to be subject to automated decision-making (if applicable)
Legal bases for processing
- Performance of contract: processing necessary for bookings
- Consent: for marketing and special category data
- Legitimate interests: responding to enquiries, service improvement, limited direct marketing. We conduct legitimate interest assessments where required.