Privacy Policy

1. Who We Are

HavanaSuites.com ("Havana Suites," "we," "our," or "us") is a curated travel and hospitality information platform specializing in luxury boutique hotels and vacation rentals in Havana, Cuba. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at https://havanasuites.com or interact with our services.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our site.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Subscribe to our early-access email list: We collect your email address when you sign up through our website form.
• Contact us via email: We collect your name, email address, and the content of your message when you write to info@havanasuites.com.
• Request property information: We may collect additional details such as travel dates, group size, and preferences when you submit an inquiry.

2.2 Information Collected Automatically

When you visit our website, certain information is automatically collected by our servers and analytics systems, including:

• Log data: Your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps.
• Device information: Device type, screen resolution, and browser capabilities.
• Usage data: Pages you view, time spent on pages, links you click, and navigation patterns.
• Cookie data: Information stored in cookies and similar tracking technologies (see Section 4).

2.3 Information from Third Parties

We may receive information about you from third-party services that integrate with our website, such as analytics providers. We do not purchase or acquire personal data from data brokers.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Email communications: To send you our early-access updates, curated property announcements, travel intelligence reports, and other information you have requested. Each email includes an unsubscribe link.
• Customer service: To respond to your inquiries, questions, and requests for information about properties or travel to Havana.
• Website improvement: To analyze how visitors use our website, identify popular content, and improve the user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• Security: To detect, prevent, and address technical issues, fraud, and abuse.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics data. A cookie is a small text file stored on your device by your browser at the request of a website.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the website to function properly. These cannot be disabled. They include session management cookies that remember your preferences during a single visit.
• Analytics cookies: We use analytics services (see Section 5) to understand how visitors interact with our site. These cookies collect aggregated, anonymized data about page views, traffic sources, and user behavior.
• Preference cookies: Remember choices you make (such as language preference) to personalize your experience.

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being set. Disabling certain cookies may affect the functionality of our website. Refer to your browser's help documentation for instructions on managing cookies:

• Google Chrome: Settings → Privacy and Security → Cookies
• Mozilla Firefox: Preferences → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and Website Data
• Microsoft Edge: Settings → Privacy, Search, and Services → Cookies

5. Third-Party Services

We use the following third-party services that may collect, process, or store data in connection with your use of our website:

5.1 Supabase (Database & Email Storage)

We use Supabase to securely store email addresses submitted through our early-access signup form. Supabase is a secure, SOC 2 Type II-certified database platform. Your email address is stored in Supabase's cloud infrastructure. Supabase's privacy policy is available at supabase.com/privacy.

5.2 Google Fonts

Our website uses Google Fonts to display typography. When you visit our site, your browser makes a request to Google's servers to load the fonts. This may transmit your IP address to Google. Google's privacy policy is available at policies.google.com/privacy.

5.3 Unsplash (Photography)

We use photography from Unsplash, a stock photography platform. Images are served directly from Unsplash's content delivery network (CDN), which may log your IP address. Unsplash's privacy policy is available at unsplash.com/privacy.

5.4 Analytics Providers

We may use web analytics services to help us understand how visitors use our site. These services use cookies to collect aggregated, anonymized usage data. We configure these services to minimize personal data collection and do not permit them to use data collected on our site for their own advertising purposes.

5.5 Email Service Providers

When we send email communications, we may use third-party email delivery platforms to ensure reliable delivery. These providers process email addresses on our behalf under data processing agreements and are not permitted to use your data for their own marketing purposes.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted service providers (listed in Section 5) who assist in operating our website and delivering our services. These providers are bound by contractual obligations to process data only on our instructions.
• Legal requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: If Havana Suites is acquired, merged, or undergoes a similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Email subscriber data: Retained until you unsubscribe or request deletion. After unsubscribing, we retain a suppression record (your email in anonymized form) to ensure we do not accidentally re-add you to our list.
• Inquiry and correspondence data: Retained for up to 3 years from the date of last contact, or longer if required for legal or compliance purposes.
• Analytics data: Aggregated, anonymized analytics data may be retained indefinitely. Individual-level data is anonymized within 26 months.
• Legal holds: We may retain certain data longer if required by applicable law or if we reasonably believe it may be needed in connection with pending or threatened legal proceedings.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal information.
• Right to erasure ("right to be forgotten"): Request deletion of your personal information, subject to certain legal exceptions.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your personal information in a structured, machine-readable format.
• Right to object: Object to our processing of your personal information for direct marketing purposes or other legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@havanasuites.com. We will respond within 30 days. If you are located in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Unsubscribing from emails: You may unsubscribe from our email list at any time by clicking the "Unsubscribe" link in any email we send, or by emailing info@havanasuites.com with the subject line "Unsubscribe."

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encrypted transmission of data using HTTPS/TLS protocols
• Access controls limiting who within our organization can access personal data
• Use of industry-standard database security practices through our service providers
• Regular review of our data collection, storage, and processing practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

10. International Data Transfers

Havana Suites is operated from the United States. If you are visiting from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

When transferring personal data from the European Economic Area, United Kingdom, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information. If you believe a child under 13 has submitted personal information to us, please contact us at info@havanasuites.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify email subscribers of significant changes via email with at least 14 days' notice before changes take effect
• Post a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after any changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving privacy-related questions and complaints promptly and fairly. We aim to respond to all inquiries within 30 days of receipt.