Privacy, terms and security

Who we are

VillaHD is a digital support brand for villa owners. Villa Calendar (cal.villahd.com) is a VillaHD product. VillaHD is the data controller and the provider for both websites.

You can reach us at info@villahd.com or on WhatsApp at +90 532 497 79 07.

Data we process

Account data includes your name, email, phone number, password hash, language, currency and theme. Villa data includes the name, link, descriptions, photos and rates you add. Reservation data includes dates, guest name, phone, email, guest count, amount and notes. Technical data includes IP address, browser details, security logs and necessary cookie identifiers.

When a villa owner enters guest data, the owner is the controller for that guest data and VillaHD acts as a processor. Owners must have a lawful basis and any consent required from their guests.

Purposes and legal bases

We process data to provide the calendar, reservations, iCal sync, pricing and account features under our contract, to keep the service secure under our legitimate interest, to answer enquiries, and to send messages you request based on consent. Under the GDPR, the Turkish KVKK and similar laws, you may withdraw consent at any time.

Cookies and third parties

We use only necessary cookies: a session cookie for login and preference cookies for language, currency and theme. We do not currently use Google Analytics, Meta Pixel or advertising cookies.

If we add analytics or advertising later, we will update this notice and ask for consent where required. Links to Google, Meta, Instagram, Facebook, WhatsApp, Airbnb or Booking.com open third-party services with their own policies.

Sharing and transfers

We use Cloudflare for hosting, DNS, security and email. Cloudflare processes technical data on our behalf and may transfer data internationally under its safeguards. We do not sell personal data. Airbnb, Booking.com, Google, Meta and other platforms are independent controllers for data you exchange with them.

Retention and security

Account data is kept while your account is active. Reservation and activity records are kept for two years and then deleted. Pending signup requests are kept for seven days unless approved.

We use HTTPS, PBKDF2 password hashing, HttpOnly session cookies, access controls and logging. No system is completely secure. Report a concern to info@villahd.com.

Your rights

You may request access, correction, deletion, restriction, objection or portability of your data, and withdraw consent. Write to info@villahd.com. You may also contact your local data protection authority, including the KVKK in Türkiye.

Terms of use

Villa Calendar is a tool for villa owners. Free accounts are limited to five villas. New accounts may require approval. You are responsible for your content, for the guest data you enter, and for complying with platform rules and local law.

We do not guarantee bookings, rankings or uninterrupted availability. The service is provided as is. To the extent permitted by law, VillaHD is not liable for indirect loss. We may update the service and these terms. These terms are governed by the laws of Türkiye, without affecting mandatory consumer rights.

Security reporting

If you find a vulnerability, contact info@villahd.com before disclosing it publicly. Do not share your password with anyone.