Privacy Policy

What this policy covers

This website presents Penthouse Pallazzo, a vacation rental in Santo Domingo, Dominican Republic. This policy explains what information the site collects, why, and the rights you have over it. Bookings themselves happen on Airbnb, under Airbnb's own privacy policy — this site never sees your payment details, identity documents, or booking history.

What we collect

The contact form collects your name, email address, travel dates if you choose to share them, and the text of your message. We use this information for one purpose: answering you. It is not added to any marketing list.

With your consent, the site uses Google Analytics 4 to count visits and understand which pages help guests. Analytics runs only after you press Accept on the cookie notice; if you decline, no analytics cookie is set. The analytics data we see is aggregated — we do not use it to identify individual visitors.

Our hosting provider, Cloudflare, processes IP addresses in server logs as a technical necessity of serving the site and protecting it from abuse.

The legal bases

For the contact form, the legal basis is taking steps at your request before entering into an agreement, and our legitimate interest in answering the people who write to us. For analytics, the legal basis is your consent, which you can withdraw at any time by clearing this site's data in your browser — the notice will ask again.

Cookies

The site sets one item of local storage to remember your cookie choice, and — only after consent — Google Analytics cookies (_ga and related). There are no advertising cookies, no cross-site trackers, and no resale of data to anyone.

Who else is involved

Google LLC processes analytics data on our behalf. Cloudflare, Inc. hosts the site. Resend, Inc. delivers contact form messages to our inbox as email. Each processes data under its own contractual commitments. When you click through to Airbnb to book, you leave this site and Airbnb's privacy policy applies.

International transfer and retention

The site is served globally through Cloudflare's network, and the processors above operate in the United States under standard contractual clauses. Contact messages are kept for up to 24 months so we can help returning guests, then deleted. Analytics data is retained for 14 months, the shortest period Google Analytics offers.

Your rights

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email us and we will answer within 30 days.

If you are in the European Union or the United Kingdom, these rights come from the GDPR, and you may also lodge a complaint with your supervisory authority. If you are in California, the CCPA/CPRA gives you the rights to know, to delete, and to opt out of sale or sharing — we sell nothing and share nothing for advertising, so there is nothing to opt out of, and we will never discriminate against you for exercising your rights. If you are in Brazil, the LGPD grants you the equivalent rights of access, correction, deletion, and information about sharing. If you are in Mexico, the federal data protection law (LFPDPPP) grants you the ARCO rights — access, rectification, cancellation, and opposition — which you can exercise through the same email.

Children

The site is intended for adults planning travel. We do not knowingly collect information from children under 16; if you believe a child has sent us data, write to us and we will delete it.

Contact

For any privacy question or request, email the address in the sidebar. This policy was last updated on 7 August 2026; if it changes materially, the date at the top of this page changes with it.