Privacy Policy

Last updated: 13 May 2026

This Privacy Policy explains how Neil Gallacher ("we", "us") collects, uses and protects personal data when you use lacasaneil.com or make a booking enquiry. It is written to comply with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

1. Who we are

This website is operated by Neil Gallacher, owner of La Casa Neil holiday apartment, Calahonda, Mijas, Málaga 29649, Spain. Contact: neilgallacher1979@gmail.com.

We are the data controller in respect of personal data collected through this website.

2. What data we collect

When you submit the enquiry form on this website we collect:

• Full name
• Email address
• Phone number (optional)
• Number of guests
• Requested check-in and check-out dates
• Any free-text message you provide

If you later book directly, we may additionally collect:

• Postal address (for invoicing and damage-deposit records)
• Bank transfer references (for payment matching)

We do not collect special-category data (race, religion, health, etc.) or financial card details. Payments are processed by your bank or by a card-link payment processor; we never see your card number.

3. How we use your data

We use your personal data for the following purposes:

• To respond to your booking enquiry and answer questions about the property (lawful basis: contract — Art. 6(1)(b) GDPR).
• To manage your booking if you proceed: confirmation, pre-arrival information, in-stay communication, post-stay follow-up (lawful basis: contract).
• To send occasional repeat-booking offers to past guests, where you have indicated you would like to hear from us (lawful basis: legitimate interest — Art. 6(1)(f)).
• To meet tax and legal record-keeping obligations (lawful basis: legal obligation — Art. 6(1)(c)).

4. Who we share your data with

We do not sell your data and we keep sharing to a minimum. The third parties who may process your data on our behalf are:

• FormSubmit (formsubmit.co) — the form-handling service that delivers your enquiry to our email inbox. FormSubmit privacy policy.
• Google LLC — provides the embedded map (Google Maps) and the web fonts (Google Fonts) used on this site, only after you give explicit cookie consent. Google privacy policy.
• GitHub — hosts the website (GitHub Pages). Access logs are kept by GitHub for security purposes. GitHub privacy statement.
• Airbnb — separately, if you book via the Airbnb listing rather than directly, Airbnb processes your booking data and we receive only the booking details from them. Airbnb privacy policy.

5. How long we keep your data

• Enquiries that don't become bookings: 12 months from the date of the last contact, after which we delete the email thread.
• Bookings: 7 years from the end of the stay (Spanish tax authorities require records to be retained for this period).
• Repeat-booking contact list: until you ask to be removed, or 5 years from the date of the last booking, whichever comes first.

6. Where your data lives

Personal data is held on a single laptop located in Spain (encrypted at rest), in Gmail's servers (EU/US — Gmail has Standard Contractual Clauses in place for data transfers), and on FormSubmit's servers (US-based; standard contractual clauses apply).

7. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase ("right to be forgotten") your data, unless we have a legal obligation to retain it.
• Restrict or object to processing in certain circumstances.
• Data portability — receive your data in a structured, common format.
• Withdraw consent at any time for any processing based on consent.
• Lodge a complaint with the Spanish data protection authority (AEPD — www.aepd.es) or, if you are in the UK, the ICO (www.ico.org.uk).

To exercise any of these rights, email neilgallacher1979@gmail.com with the subject "GDPR request". We will respond within 30 days.

8. Cookies

This site uses a small number of third-party resources that set cookies (Google Fonts, Google Maps) only after you consent via the cookie banner. We do not use analytics, advertising or tracking cookies. See our separate cookie policy for details.

9. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.

10. Changes to this policy

We will update this policy if our practices change. The "last updated" date above will reflect the most recent revision. Material changes will be highlighted on the homepage.

11. Contact

Neil Gallacher · La Casa Neil · Calahonda, Mijas, Málaga 29649, Spain · neilgallacher1979@gmail.com