Privacy Policy

1. Data controller

The controller of your personal data is Week Homes S.r.l., with registered office at Viale San Concordio 367/C, 55100 Lucca (LU), Italy, VAT number and tax code 02298870466.

For any privacy-related request you can contact us at legal@nowvilla.com.

2. What data we collect

Account and identity data: name, email address, password (stored in hashed form), profile details and role (guest or host).

Booking and transaction data: listings viewed and booked, dates, guests, messages exchanged, reviews, and shared-expense entries in the Now Villa Wallet.

Payment data: payment and payout information processed through our payment provider, Stripe. Full card details are handled by Stripe and are not stored by Now Villa.

Host verification and compliance data: where required to provide the service (for example, guest information some Hosts must report to the authorities).

Technical and usage data: IP address, device and browser information, and data collected through cookies and similar technologies (see our cookie information below).

3. How and why we use your data (legal bases)

To provide the Platform and perform our contract with you — creating and managing your account, enabling bookings, payments and communication between Hosts and Guests (Art. 6(1)(b) GDPR).

To comply with legal obligations — accounting, tax, anti-fraud and, where applicable, guest-reporting requirements (Art. 6(1)(c) GDPR).

For our legitimate interests — securing the Platform, preventing fraud and abuse, improving our services and providing customer support, balanced against your rights (Art. 6(1)(f) GDPR).

With your consent — for non-essential cookies and, where applicable, marketing communications, which you can withdraw at any time (Art. 6(1)(a) GDPR).

4. Who we share your data with

Other users, to the extent necessary for a booking — for example a Host and Guest receive the information needed to complete and manage a reservation.

Service providers acting on our behalf, including our payment provider (Stripe), hosting and infrastructure providers, and email/communication providers. These parties process data under appropriate contractual safeguards.

Authorities and third parties where required by law, to enforce our Terms, or to protect the rights, safety and property of Now Villa, our users or the public.

We do not sell your personal data.

5. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we ensure an adequate level of protection through appropriate safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above: for the life of your account and thereafter as required to comply with legal obligations (for example, accounting and tax records are typically retained for ten years under Italian law), to resolve disputes and to enforce our agreements.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict or object to certain processing, to data portability, and to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

To exercise any of these rights, contact us at legal@nowvilla.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encryption in transit, hashed passwords and access controls. No system is completely secure, but we work continuously to protect your information.

9. Cookies

We use strictly necessary cookies to operate the Platform and, subject to your consent, functional and analytics cookies to improve it. You can manage your preferences through the cookie banner shown on your first visit and, thereafter, by clearing the consent stored in your browser.

10. Children

The Platform is not directed to children under 18 and we do not knowingly collect their personal data. If you believe a minor has provided us with personal data, contact us so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Where changes are material we will provide reasonable notice through the Platform or by email. The “last updated” date at the top indicates when the Policy was last revised.