Privacy notice

Last updated: 13 November 2026.

These notes describe this version of the Villa Eagle website and enquiries you send by email. Where available, the enquiry form uses protected storage and email notifications. Advertising and review embeds remain disabled. Google Maps on the contact page loads automatically only with a valid saved Maps permission; see the cookie information below. Where optional analytics is enabled, it requires your explicit consent. Test previews use a separate QA property; the public domain uses the existing Villa Eagle GA4 property only after controlled activation. See the cookie information for purposes, data, providers, storage and withdrawal.

Data controller and privacy contact

The controller for enquiries submitted through this website is Villa Eagle. Contact address: Borje bb, Žabljak, Montenegro. Email: [email protected].

Sunny Village Zabljak manages the accommodation and lettings. This operational role is separate from the controller role for website enquiries; it does not by itself give access to the private enquiry inbox.

For privacy questions about Villa Eagle Žabljak or to make a request about your information, email [email protected]. Include enough context for us to identify the correspondence or issue, but do not send unnecessary identity documents.

Website delivery and security

The site is delivered through Cloudflare. When a page is requested, technical information such as the IP address, requested URL, request time and browser information may be processed to deliver and secure the service. Cloudflare describes its processing and international operations in its privacy policy.

The purpose is reliable delivery, security and investigation of technical problems. Where the GDPR applies, the basis for necessary website operation is our legitimate interest in providing and protecting the website. This does not authorise unrelated advertising or marketing use.

When enabled for this form, Cloudflare Turnstile checks for automated abuse when you attempt to send an enquiry. It may show a confirmation checkbox. Cloudflare processes technical browser and challenge information for this security check. We send the resulting verification token to Cloudflare for server-side validation, without including your name, email address or message in that validation request. We do not save the challenge token in the enquiry inbox or use this check for advertising. If the check is unavailable, your entries remain in the form and you can retry or email us directly. Further details are in the Turnstile privacy information.

Form and email enquiries

If you use the available enquiry form, your name, email, message and language are saved in a private Cloudflare D1 inbox to answer your question. The standard retention period for form enquiries is 365 days from receipt, as also shown beside the form when it is enabled. Access is restricted to authorised administrators. An email notification contains a reference and protected inbox link, rather than your message text. SiteGround is the initial outgoing email provider; any provider change requires an update to these notices before activation.

If you email us directly, your address, message and any information you choose to include are processed to answer the enquiry and, where relevant, take steps towards a stay you request. Your email service and our mailbox service handle delivery. An email link itself does not submit a message to this website.

Where the GDPR applies, correspondence about a requested booking may be necessary for pre-contractual steps or a contract; general questions may be handled in our legitimate interest in responding. We do not automatically subscribe correspondents to marketing. Please send only information needed for your question.

Retention and access

Form abuse protection uses a salted hash of a technical address in a short-lived rate-limit bucket; the plain address is not saved in the inquiry table. The 365-day period runs from receipt, not from the last reply or a change in status. We may delete an enquiry sooner when it is no longer needed or an applicable erasure request is fulfilled. When the form is enabled, expired form messages are hidden from the active inbox and the scheduled daily retention job removes them from the database. Physical deletion may therefore occur at the next successful daily run. Cloudflare D1 Time Travel currently provides a separate recovery window of up to 7 days on the configured plan. Email copies, downloads and provider records are not automatically erased by the inbox retention job; their retention must also be limited to what is needed for the relevant purpose. Booking, accounting and statutory guest records are separate from ordinary website enquiries and may be subject to different legal retention duties.

A daily recovery job runs in GitHub Actions and creates an encrypted backup of the form enquiry records. Encrypted backup files are stored as artifacts in our private GitHub repository with a configured retention period of 7 days from creation. The decryption key is kept separately. The backup process necessarily reads the enquiry records to prepare the encrypted copy; enquiry contents are not intended for build logs or public website files. GitHub describes its processing in its privacy statement.

Deleting a record from the active inbox does not immediately remove it from an earlier backup. Such copies remain restricted to recovery and expire under their separate 7-day retention period. Before using restored records, we must check their original expiry dates and any applicable erasure requests so that a restore does not restart the 365-day period or return intentionally deleted enquiries to active use. Email copies and any separately downloaded files require their own deletion checks.

Information is retained only for as long as needed for the relevant enquiry, service, security purpose or applicable legal requirements. Necessary records may need to be kept after correspondence ends; unrelated information should not be kept indefinitely. Access is limited to people and service providers who need it for those purposes. We do not publish enquiry contents on the website.

Service providers may process information internationally. The applicable processing terms and safeguards depend on the service used. Contact us for information relevant to your correspondence. This notice does not promise that all data remains within one country.

Your choices and rights

Depending on the applicable law and the processing involved, you may request access, correction, deletion, restriction or portability, and may object to processing. Where processing relies on consent, you may withdraw it for the future. You may also complain to the competent data protection authority. Some rights have conditions or exceptions; we may need proportionate information to verify a request.

Booking platforms and other websites

Booking.com and Airbnb handle reservations made on their platforms under their own terms and privacy notices. Other external links take you to independent websites. Their processing is governed by their own notices when you visit them. The local photo gallery and 360° house view do not require an external map or review widget.

Cookies and changes

See our cookie information for the current use of browser storage. If optional analytics, an enquiry form or other services are introduced, the notices and any required choices will be updated to reflect the actual service. Contact and booking options are on the contact page.