Privacy Policy
Last updated: July 2026
1. Introduction
StayHeraklion ("we", "us", "our") operates stayheraklion.com. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our website and the choices you have associated with that data.
2. Cookies
We do not set any cookies. Our analytics provider is cookieless, we run no advertising or marketing tags, and we do not use tracking pixels or browser fingerprinting.
Because we store nothing on your device and collect no personal data, there is no consent banner and nothing for you to opt out of. Our hosting provider, Cloudflare, may set a strictly necessary security cookie to protect the site from automated abuse; this is exempt from consent requirements and is not used to track you.
If you click an affiliate link, the partner's website may set its own cookies once you arrive there. That happens on their domain under their privacy policy, not ours — see section 6.
3. Analytics
We use Plausible Analytics, a privacy-friendly, cookieless analytics service, to understand which pages are useful to our readers. Plausible does not use cookies, does not collect or store any personal data, and does not track visitors across websites or over time. All data is aggregated and contains no personally identifiable information.
Our legal basis for this processing is legitimate interests (Article 6(1)(f) GDPR): we need a basic measure of which pages people read in order to maintain the site. Because no personal data is processed, no consent is required. You can read Plausible's data policy for full details.
4. Data We Collect
We collect the following types of data:
- Aggregate usage data: Pages visited, referring website, browser, operating system, device type, and country. Collected by Plausible in aggregate form, without cookies and without storing personal data.
- Contact form data: Name, email, and message content when you use our contact form. This is used only to reply to you.
5. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
- Right to access — you can request a copy of your personal data
- Right to rectification — you can request correction of inaccurate data
- Right to erasure — you can request deletion of your data
- Right to restrict processing — you can request limited use of your data
- Right to data portability — you can receive your data in a structured format
- Right to object — you can object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@stayheraklion.com.
6. Affiliate Links
This site contains affiliate links to third-party booking platforms. When you click an affiliate link and make a purchase, we may earn a commission. We do not share your personal data with affiliate partners, and we do not receive personal data about you from them — they operate under their own privacy policies, which govern any cookies they set once you reach their site.
7. Third-Party Services
We use the following third-party services:
- Plausible Analytics: Cookieless, privacy-friendly usage analytics — privacy policy
- Affiliate partners: Booking.com, Viator, Airbnb, GetYourGuide, Expedia
- Cloudflare: Website hosting and CDN
8. Data Retention
Plausible stores only aggregate statistics with no personal data, retained in line with its own data policy. Contact form submissions are retained for up to 12 months.
9. Children's Privacy
Our website is not directed to children under the age of 16. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "last updated" date.
11. Contact
If you have questions about this privacy policy, contact us at privacy@stayheraklion.com.