What we hold, and why.

Controller. Eight Obsidia Ltd, trading as Avory Astoria, registered in England and Wales, company number 16955167. Contact: info@avoryastoria.com.

What we collect. Your name, email address and phone number when you reserve or enquire; the details of your reservation; and the messages you send us. Nothing else.

Why. To confirm and deliver what you reserve, to respond to your enquiries, and to send service communications by email and WhatsApp about your reservations. We do not sell data. We do not run advertising on this site.

Who processes it. Stripe processes payments — your card details go to Stripe directly and never touch our servers. Our site runs on Vercel with data held in Supabase; confirmation email is sent by Resend; WhatsApp messages are carried by WhatsApp Business. Each acts under its own published terms.

Retention. Reservation records are kept for as long as accounting law requires — six years — then removed. Enquiry messages that do not become reservations are removed within twelve months.

Your rights. Under UK GDPR you may ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to info@avoryastoria.com; we respond within one month. Complaints lie to the ICO, ico.org.uk.

Cookies. Essential cookies only — those needed to hold your itinerary and complete checkout. No tracking cookies are set by this site.