Privacy Policy

Last updated: 18 August 2026

Hotel Breaks 4U Ltd (“Hotel Breaks 4U”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, make an enquiry, request information or make a booking with us.

Hotel Breaks 4U Ltd is a company registered in Cyprus under registration number HE 432684.

Our registered office is:

Hotel Breaks 4U Ltd Skali 1 Tala Panorama Villa 1 Tala 8577 Paphos Cyprus

1. Who is responsible for your personal data?

Hotel Breaks 4U Ltd is the data controller responsible for personal data collected through our website and in connection with our services.

If you have any questions about how we use your personal data, or wish to exercise your data protection rights, please contact us using the contact details provided on our website.

2. What personal data do we collect?

Depending on how you interact with us, we may collect some or all of the following information.

Information you provide to us

This may include:

• Your name
• Postal or billing address
• Email address
• Telephone or mobile number
• Booking and holiday requirements
• Details of people travelling with you where necessary to arrange a booking
• Payment and billing information
• Communications you have had with us
• Information you provide when completing forms on our website
• Preferences or requirements relating to your booking
• Any other information you voluntarily provide to us

We only request personal data that is reasonably necessary for the relevant purpose.

Where you provide us with personal data relating to another person, such as a person travelling with you, you should ensure that you have the authority or lawful basis to provide that information to us and, where appropriate, that the person concerned has been informed that their personal data is being provided to us.

Information collected automatically

When you visit our website, certain technical information may be collected automatically. This may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Approximate geographical location
• Pages visited
• Time and date of visits
• Referring website
• Website usage information

Some of this information may be collected through cookies and similar technologies. Further information is provided in the Cookies section below.

3. How do we use your personal data?

We may use your personal data to:

• Respond to enquiries and requests
• Provide information about our hotel breaks and services
• Process and manage bookings
• Arrange services connected with your booking
• Process payments where applicable
• Communicate with you about your booking
• Contact you regarding changes, cancellations or other important information
• Provide customer support
• Maintain records of our business transactions
• Improve our website, services and customer experience
• Maintain the security and integrity of our website and systems
• Detect and prevent fraud, misuse or security issues
• Comply with legal and regulatory obligations
• Send marketing communications where you have given the appropriate consent or where otherwise permitted by law

We will not use your personal data for purposes that are incompatible with the purpose for which it was originally collected unless permitted or required by law.

Where we intend to use your personal data for a new purpose that is materially different from the original purpose, we will provide any information required by applicable data protection law before carrying out that further processing.

4. Our legal basis for processing your personal data

Under the General Data Protection Regulation (GDPR), we must have a lawful basis for processing personal data.

Depending on the circumstances, we may process your personal data on one or more of the following legal bases.

It is necessary to perform a contract

We may need your personal data to process a booking, provide services, arrange your holiday or otherwise fulfil an agreement with you.

You have given consent

Where consent is required, we will ask for your consent before processing your personal data for the relevant purpose.

This may include certain marketing communications or the use of certain non-essential cookies.

You can withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

It is necessary for our legitimate interests

We may process personal data where this is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Operating and administering our business
• Managing customer relationships
• Improving our services and website
• Maintaining website and system security
• Preventing fraud and misuse
• Protecting our business and legal interests
• Communicating with existing customers where permitted by law

We have a legal obligation

We may process or retain personal data where this is necessary to comply with a legal or regulatory obligation.

5. Marketing communications

We may occasionally contact you with information about Hotel Breaks 4U, including offers, new hotel breaks, promotions and other information that may be relevant to you.

Where consent is required, we will only send marketing communications where you have provided that consent.

Where applicable law allows us to contact existing customers about similar products or services without obtaining separate consent, we may do so in accordance with the applicable legal requirements.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us.

Unsubscribing from marketing communications will not affect important service communications relating to an existing booking.

6. Who do we share your personal data with?

We may share personal data where necessary to provide our services, process your booking or operate our business.

Depending on the circumstances, this may include sharing information with:

• Hotels and accommodation providers
• Travel and holiday service providers
• Payment service providers
• Website and hosting providers
• Booking and reservation systems
• Email and communication service providers
• IT, security and technical service providers
• Professional advisers
• Legal, regulatory or government authorities where required

We only share personal data where there is a lawful and legitimate reason to do so.

Where appropriate, we require third-party service providers acting on our behalf to protect your personal data and to process it only for authorised purposes.

Some third parties may process your personal data as independent controllers rather than as processors on our behalf. Where this applies, their own privacy policies and terms may also apply.

We do not sell your personal data to third parties.

7. International transfers

Some of our service providers may process personal data outside Cyprus or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is lawful and that your personal data continues to receive an appropriate level of protection under applicable data protection law.

This may include relying on:

• An adequacy decision issued by the European Commission
• Standard contractual clauses or other approved contractual safeguards
• Another lawful transfer mechanism recognised under applicable data protection law

Where required, further information about the relevant safeguards may be requested from us.

8. How long do we keep your personal data?

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected.

The retention period depends on the type of information, the purpose for which it was collected and any legal, accounting, tax, regulatory or contractual requirements that apply.

For example, booking and transaction information may need to be retained for longer periods to comply with accounting, tax, legal and regulatory requirements and to establish, exercise or defend legal claims.

Where we no longer have a legitimate need to retain personal data, we will securely delete it or anonymise it where appropriate.

9. Cookies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help a website remember information about your visit and understand how the website is used.

We may use cookies for purposes including:

• Essential website functionality
• Website security
• Remembering preferences
• Understanding website traffic and usage
• Measuring the effectiveness of our marketing
• Improving website performance
• Providing relevant advertising, where applicable

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage or withdraw your cookie preferences through our cookie controls where available.

You can also change your browser settings to block or delete cookies. Blocking certain cookies may affect the functionality of the website.

10. Payment information

Where payments are made through our website or through a third-party payment provider, payment information may be processed directly by the relevant payment service provider.

Where a third party processes your payment, Hotel Breaks 4U may not receive or store your full card details.

Payment information will be handled in accordance with the applicable payment provider’s privacy and security procedures.

11. Keeping your personal data secure

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Accidental loss
• Destruction
• Alteration
• Unauthorised disclosure
• Misuse

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should also take reasonable steps to protect your own information, including keeping passwords and account details confidential where applicable.

12. Your data protection rights

Subject to applicable law and certain legal conditions, you may have the following rights.

Right of access

You may ask us for a copy of the personal data we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may ask us to delete your personal data in certain circumstances.

Right to restriction

You may ask us to restrict how we process your personal data in certain circumstances.

Right to object

You may object to certain types of processing, including processing based on legitimate interests.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to data portability

Where applicable, you may request that certain personal data you have provided to us is supplied in a structured, commonly used and machine-readable format, or transferred to another controller where technically feasible.

This right generally applies where processing is based on your consent or is necessary for the performance of a contract and the processing is carried out by automated means.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights are subject to certain exemptions and limitations under applicable law.

13. How to exercise your rights

If you wish to exercise any of your data protection rights, please contact Hotel Breaks 4U using the contact details provided on our website.

We may need to ask for additional information to verify your identity before responding to a request.

We will normally respond to valid requests without undue delay and, in any event, within the period required by applicable data protection law.

In most circumstances, exercising your data protection rights is free of charge. Where permitted by law, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

14. Complaints

If you have concerns about the way we have handled your personal data, we encourage you to contact us first so that we can investigate and try to resolve the issue.

You also have the right to lodge a complaint with the relevant data protection supervisory authority.

For Hotel Breaks 4U Ltd, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection in Cyprus. The Commissioner is the independent supervisory authority responsible for monitoring the application of the GDPR in Cyprus.

The Commissioner’s published contact details include:

Office of the Commissioner for Personal Data Protection Kypranoros 15 1061 Nicosia Cyprus

Telephone: +357 22 818456 Email: commissioner@dataprotection.gov.cy

The Commissioner also provides a formal procedure for submitting complaints concerning personal data processing.

15. Children’s information

Our website and services are not specifically directed at children.

We do not knowingly collect personal data from children for marketing purposes.

Where information about children is required as part of a holiday booking, it should be provided by a parent, guardian or other person legally authorised to provide that information.

Where we receive personal data about a child from another person, we will process that information only where there is a lawful basis for doing so and where it is necessary for the relevant booking or service.

16. Links to other websites

Our website may contain links to third-party websites, including hotel, travel, payment, social media or other service providers.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

17. Automated decision-making and profiling

We may use technology to analyse website usage, measure marketing performance or improve our services.

We do not currently make decisions about customers based solely on automated processing that produce legal effects or similarly significant effects.

Where this changes, we will provide any information and rights required by applicable data protection law.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology, legal requirements or data processing practices.

The latest version will always be published on our website, with the date shown at the top of this page.

19. Contact us

If you have any questions about this Privacy Policy, your personal data or how we process your data, please contact Hotel Breaks 4U using the contact details provided on our website.

Hotel Breaks 4U Ltd Skali 1 Tala Panorama Villa 1 Tala 8577 Paphos Cyprus

Company registration number: HE 432684

Last updated: 18 August 2026