Privacy Policy

Last updated: 22 October 2026

1. Who is responsible for your data?

The controller responsible for personal data collected through this website is Petra Várkonyi, trading as Staylira, a self-employed professional based in the Canary Islands, Spain.

Business address: 38670, Adeje, Calle Las Jarcias 6. Santa Cruz de Tenerife, Spain

Email: hello@staylira.com

Website: staylira.com

This policy covers visitors to the Staylira marketing website and people who contact us about Staylira. The website accepts enquiries; submitting a form does not create a subscription, take a payment or activate a guest-assistant account. The separate guest application is not currently offered as an operational service through this website. This policy does not describe processing by a live guest-assistant application or payment service.

2. What information do we collect?

If you use our enquiry form, we collect:

• Your name, email address and message, which are required to submit the form.
• Your property location and number of properties, if you choose to provide them.
• Your response to the form’s contact-permission field about the enquiry.
• Any other information you choose to include in your message or subsequent correspondence.

You do not have to make an enquiry. If you do not provide the required information, you cannot submit the form; without sufficient contact information, we cannot respond to you.

Our website and hosting infrastructure also process technical information needed to deliver and protect the website. Cookie preferences are handled as described in section 8.

Please do not send guest records, access codes, passwords, payment-card information or unnecessary sensitive personal information through the enquiry form.

3. Why do we use your information, and on what basis?

We use enquiry information to receive and review your request, respond to your questions and follow up on the matter you contacted us about. The form sends a notification to our enquiry mailbox and an acknowledgement to the email address you provide.

Where you ask us to take steps before a possible service agreement, the legal basis is Article 6(1)(b) GDPR, to take those steps at your request. This does not mean that submitting an enquiry concludes a service agreement.

For general enquiries that are not pre-contractual requests, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to answer communications addressed to us and manage the related correspondence. We also rely on our legitimate interest in maintaining a functioning, secure website for necessary technical operation and security processing.

Where a specific legal obligation requires us to retain or disclose information, the legal basis is Article 6(1)(c) GDPR.

The contact-permission field relates to responding to your enquiry. It is not a newsletter subscription or permission for unrelated advertising. We do not use enquiry submissions for unsolicited newsletters or unrelated promotional campaigns, and we do not sell your personal data.

4. How long do we keep information?

Enquiries that do not result in a customer relationship are retained for 12 months after the last relevant communication, unless a lawful reason requires longer retention. The period runs from the last relevant exchange about your enquiry, rather than automatically from the date you first submitted the form. A request to exercise your data protection rights will be assessed separately under applicable law.

This enquiry retention period applies to stored form submissions and related email correspondence. Our retention procedure is a manual monthly review, not automatic deletion. The review checks the last relevant exchange, whether a customer relationship exists and whether a lawful reason requires longer retention. Eligible non-customer enquiries and corresponding working copies are then removed from Elementor Submissions and the enquiry mailbox. The original form-submission date alone does not determine the deletion date. If a customer relationship is established, we will provide the applicable customer privacy information.

For technical and security logs, retention is determined by the type of record, the time necessary to operate and troubleshoot the service or investigate a security incident, and applicable legal requirements. A particular log may need to be kept longer while a relevant incident or legal obligation remains active.

Backup copies follow the retention and replacement arrangements applicable to the hosting or backup service used. They are separate from the live enquiry records; deleting a live enquiry does not imply immediate removal from every backup. Retention must take account of recovery needs, the service’s backup lifecycle and any legal preservation requirement. If a backup is restored, previous enquiry-deletion decisions must be reapplied before those records return to ordinary use. No fixed provider-specific backup or server-log period is represented here as having been independently verified.

The website's email-delivery logging is configured to retain logs for 14 days. This is a verified configuration setting, not a statement that deletion of each individual log has been checked. It is separate from enquiry retention in WordPress, email correspondence and backups.

5. Where is information stored, and who receives it?

Enquiry submissions are stored in the website's WordPress installation using Elementor Submissions. The form also sends an email notification to hello@staylira.com and an acknowledgement to the address you enter.

The website uses Hostinger for hosting and email infrastructure. FluentSMTP, installed within WordPress, routes the website's outgoing email through the configured Hostinger SMTP service. Elementor and FluentSMTP are software used by the website; naming them does not mean that enquiry content is sent to their developers as a separate hosted form or mail service.

Website administrators and technical service providers may access information as needed to handle enquiries or provide hosting, email, security and maintenance. We do not disclose enquiries to unrelated third parties for their own marketing purposes. Information may also be disclosed where a legal obligation requires it.

The marketing enquiry form does not submit your enquiry to a Lovable guest application, an AI concierge or a payment/subscription service.

Provider processing and international transfers. Hostinger’s public Data Processing Addendum describes its use of subprocessors in section 6 and Appendix 3. Its section 9 provides for EU Standard Contractual Clauses for relevant transfers outside the EEA to countries without an applicable adequacy decision, subject to the conditions and exceptions stated in that addendum. The clauses are contractual safeguards for relevant transfers; they do not establish the actual processing location of a particular website or mailbox.

Which arrangements apply depends on the Hostinger services and processing involved. We do not represent that every listed subprocessor receives Staylira enquiries, that all processing stays within the EEA or that a transfer to a particular country has been confirmed. Consult the linked provider documentation for its published provisions, or contact hello@staylira.com for information about applicable processing and safeguards, including a copy where applicable.

6. Your rights

Depending on the circumstances and the conditions in data protection law, you may request access to your personal data, correction of inaccurate information, erasure, restriction of processing and data portability.

You may object, on grounds relating to your particular situation, to processing based on legitimate interests. You can contact us at hello@staylira.com to exercise your rights or ask about how we use your information. We may request additional information where reasonably necessary to verify your identity.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. Cookie choices can be changed using the website's cookie settings. The enquiry-processing legal bases are described in section 3; withdrawing a cookie choice does not automatically erase an enquiry.

You may complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es, or to another competent supervisory authority under the GDPR.

7. Automated decisions and security

The marketing enquiry form is not used for automated decisions or profiling that produce legal or similarly significant effects. Its acknowledgement email is an automatic receipt, not an AI assessment or acceptance of a paid subscription.

Access to stored enquiries is restricted to authorised website administrators and relevant service providers. No internet transmission or storage system can be guaranteed to be completely secure.

8. Cookies, fonts and browser choices

The website uses GDPR Cookie Compliance by Moove Agency to manage cookie choices. Its preference cookie records the choices made through the cookie controls. You can reopen those controls using Change cookie settings and manage stored cookies through your browser.

The website is configured to serve its Google Fonts files locally from staylira.com, rather than loading those fonts directly from Google's font servers.

For questions about cookies or your preferences, contact hello@staylira.com. Read our Cookie Policy for details of the technologies used and how to change your choices.

9. Changes and contact

We may update this policy if our processing or legal requirements change. Changes to this marketing website's policy do not by themselves activate a guest application, payment service or subscription.

For privacy questions, contact Staylira at hello@staylira.com.