Privacy policy

Last updated: 26 September 2026 (newsletter added)

This policy explains how Icarus Management ("we", "us") handles personal data when you use icarusmanagementservices.com, request a booking, create an account or contact us. We only collect what we need to look after your stay or your property, and we never sell your data.

Who is responsible

Icarus Management, Athens, Greece — the data controller. Contact: info@icarusmanagementservices.com · WhatsApp +30 698 592 4345.

What we collect

• Booking requests: the property, your dates, number of guests, your name, phone number, email (optional), special requests, and — if you book as a company — the company name and VAT number.
• Accounts (optional): your name, phone, country, account type, email and a password (stored only in encrypted form by our login provider).
• Security data: your connection's IP address when you send a request, used only to stop spam and abuse. It is deleted automatically after 30 days.
• Newsletter (optional): your email address and the date you signed up — only if you tick the consent box.
• Messages you send us on WhatsApp or by email.

Why we use it

• To hold your dates, confirm or decline your booking, and contact you about your stay (contract / steps before a contract).
• To send the emails you expect: request received, confirmation, and any change to your booking.
• To send our newsletter about new homes and offers, only if you asked for it (consent — you can withdraw it at any time).
• To keep the website and booking system secure (legitimate interest).
• To meet our legal, accounting and tax obligations for confirmed stays.

Who processes it for us

• Supabase — our booking database and login system, hosted in the European Union (Frankfurt, Germany).
• Resend — sends our booking emails.
• Netlify — hosts this website.
• WhatsApp (Meta) — only if you choose to message us there.

These providers act on our instructions under data-processing agreements. Where a provider handles data outside the EU, it relies on the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

• Requests that were declined, cancelled or expired: deleted automatically after 24 months.
• Confirmed stays: kept for as long as Greek tax and accounting rules require.
• Accounts: until you ask us to delete yours.
• Newsletter: until you unsubscribe — reply to any of our emails or write to us and we remove you straight away.

Cookies and storage

We do not use advertising or tracking cookies, and we do not run analytics that follow you. Your browser keeps only what the site needs to work: your sign-in session and, for convenience, the name, phone and email you last typed into the booking form. You can clear these at any time in your browser settings.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by writing to info@icarusmanagementservices.com. We reply within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr).

Changes

If we change this policy we will update this page and the date above.