Privacy policy

Who we are

Cretan Dreams | Villas & Construction is the controller responsible for the personal information described in this policy.

For questions about your information, to exercise your rights or to make a complaint to us, email yasas@cretandreamsvillas.com.

Information we collect

We collect information you provide when you contact us through our website, email or WhatsApp. This may include:

• 🧿Your name, email address and telephone number.
• 🧿Your preferred location, budget and villa requirements.
• 🧿The contents of your enquiry and subsequent correspondence.

We do not ask for special category information, such as health information, or criminal offence information. Please avoid including this in your enquiry.

Cloudflare may set essential security cookies to protect the website against automated abuse. These are separate from optional analytics. Our website service providers may also process technical information, such as your IP address, browser information and security logs, to operate and protect the website.

How and why we use your information

We use your information to respond to enquiries, discuss suitable land and villa options, prepare proposals and communicate with you about your project.

Where you ask us to take steps towards a contract, or we need information to fulfil a contract with you, we rely on Article 6(1)(b) GDPR: contract.

For general enquiries and website security, we rely on Article 6(1)(f) GDPR: legitimate interests. Our interests are responding to prospective customers and maintaining a secure, functioning website.

Where we must retain or use information to meet a legal requirement, we rely on Article 6(1)(c) GDPR: legal obligation.

Optional website analytics is enabled only with your consent. Where this involves personal information, we rely on Article 6(1)(a) GDPR: consent. You can withdraw permission through Cookie settings.

Providing information for an initial enquiry is voluntary. Without suitable contact details and information about your requirements, we may be unable to respond or prepare a proposal. Information necessary for a contract will be explained when requested.

Who can access your information

Your enquiry may be accessed by Cretan Dreams and the website administrator who helps manage and respond to website enquiries.

We also use service providers to operate the website and communications:

• 🧿Cloudflare, for website infrastructure, security and email forwarding.
• 🧿Resend, to deliver website enquiry emails.
• 🧿Google/Gmail, where forwarded enquiries are received in Gmail inboxes.
• 🧿WhatsApp, part of Meta, if you communicate with us through WhatsApp.

These providers process information under their applicable service and data protection terms. Some also act as independent controllers for their own service administration and security purposes.

We do not sell your personal information or share your enquiry details with construction suppliers or contractors. We may disclose information where required by law.

International transfers

Our service providers may process information outside the European Economic Area or the United Kingdom, including in the United States.

Where applicable, transfers are protected by an adequacy decision, including the EU–US Data Privacy Framework for covered transfers to certified organisations, or appropriate contractual safeguards.

Cloudflare’s published terms provide for the Data Privacy Framework and Standard Contractual Clauses. WhatsApp Business’s applicable terms provide for Standard Contractual Clauses and, where relevant, the UK Addendum.

You can contact us for information about the safeguards applicable to your information.

How long we keep information

We keep enquiry information while discussing your requirements. If you do not proceed, we delete it when the enquiry and any agreed follow-up have ended.

If you enter into a contract, we delete personal information once the contract and related work are complete, except for records we must retain to meet legal obligations or where necessary to establish, exercise or defend legal claims. Such records are kept only for the period needed for that purpose.

Your rights

Depending on the circumstances, you have the right to:

• 🧿Obtain access to your personal information and a copy of it.
• 🧿Correct inaccurate or incomplete information.
• 🧿Request deletion of your information.
• 🧿Request restriction of its use.
• 🧿Object to processing based on legitimate interests.
• 🧿Receive information you provided in a portable format where processing is automated and based on consent or contract.
• 🧿Withdraw consent at any time where we rely on consent, without affecting earlier lawful processing.

These rights are subject to applicable legal conditions and exceptions. Contact yasas@cretandreamsvillas.com to make a request. We normally respond within one month.

We do not use your information for solely automated decisions that have legal or similarly significant effects.

Complaints

You can complain directly to us using the email address above.

You also have the right to complain to a relevant data protection authority. For our business in Greece, this is the Hellenic Data Protection Authority: www.dpa.gr/en.

Where your complaint falls within UK jurisdiction, you can contact the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

Cookies and the FAQ chat

The website remembers your cookie preference and, for your current browser tab, whether you have dismissed Pavlos. With your permission, we use Cloudflare Web Analytics to understand visits and popular pages. The analytics service does not use cookies. It loads only when you accept optional analytics. Rejecting optional analytics keeps it disabled; you can withdraw permission through Cookie settings. We do not use marketing cookies. You can reopen Cookie settings in the footer to change your selection.

Pavlos provides automated FAQ answers. The chat does not submit or save your conversation. Please keep questions general and use our contact details for personal enquiries.

Changes to this policy

We review this policy when our services or information-handling arrangements change. The date above shows when it was last updated.