Privacy policy

What data we collect when you book, what it is used for, who has access to it, how long we keep it and how to exercise your rights.

Last updated: 17 October 2026

1. Data controller

The data controller is INFINITY LODGE, a simplified joint-stock company (SAS) with share capital of €500, whose registered office is at 58 rue de Monceau, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 992 796 953.

For any question about your personal data, write to infinitylodgegroup@outlook.fr or to the registered office address.

2. Data we collect

We only collect the data needed for the booking and the stay.

When you book:

• First name and surname of the main guest
• Email address
• Phone number
• Arrival and departure dates, number of guests and split between adults and minors
• Any free-text message you send us
• Any promotional code used

The split between adults and minors is requested because the tourist tax is calculated per liable person: under-eighteens are exempt.

When you pay: your card details are entered directly in the secure interface of our payment provider. They never pass through our servers and we never have access to them. We only keep the transaction status and its identifier.

When you browse: your choice regarding audience-measurement cookies is stored in your browser's local storage, so that we do not ask you again on each visit. This information stays on your device and is not sent to us.

3. Purposes and legal bases

Each processing operation is based on a specific legal basis.

• Managing your booking and your stay: making the booking, sending the confirmation, providing access details, communicating during the stay. Legal basis: performance of the contract.
• Payment and invoicing: processing the payment, issuing the invoice, collecting and paying over the tourist tax. Legal basis: performance of the contract and legal obligation.
• Accounting and tax obligations: keeping supporting documents. Legal basis: legal obligation.
• Handling complaints and disputes: dealing with your requests and, where applicable, establishing or defending a legal claim. Legal basis: legitimate interest.

We do not use your data for marketing purposes without your prior consent.

4. Recipients of the data

Your data is processed by authorised staff of INFINITY LODGE and by the following technical processors, acting on our instructions.

• Stay'Core (stay-core.com): property management software that hosts bookings, calendars and stay data.
• Stripe Payments Europe Limited: card payment processing.
• Vercel Inc.: website hosting.

Some data may be disclosed to the municipalities concerned for the collection of the tourist tax, and to our advisers and the tax authorities where required by law. Your data is never sold, rented or transferred to third parties for commercial purposes.

5. Transfers outside the European Union

Some of our providers are established in, or may process data in, the United States. These transfers are covered by the safeguards provided for in Chapter V of the General Data Protection Regulation, in particular the standard contractual clauses adopted by the European Commission and, where applicable, certification under the EU-US Data Privacy Framework.

6. Retention periods

• Booking data: kept for the duration of the contractual relationship, then archived for three years from the end of the stay, the limitation period applicable to actions between businesses and consumers.
• Accounting documents and invoices: ten years from the end of the financial year, in accordance with the French Commercial Code.
• Email exchanges that led to no booking: three years from the last contact.
• Payment data: kept by our provider according to its own retention periods, and thirteen months for transaction data in case of dispute.

7. Security

Communication with this website is encrypted using the HTTPS protocol. Access to booking data is restricted to authorised persons and protected by authentication. Payments are processed by a provider certified to the PCI DSS standard.

8. Cookies and trackers

With your consent, we may use Google Analytics to measure the audience of this website: number of visitors, pages viewed, where visits come from and the journeys leading to a booking. This measurement helps us improve the website and assess our advertising campaigns.

Nothing is stored without your consent. No audience-measurement tracker is activated until you have accepted. Declining is as easy as accepting, does not affect your browsing in any way, and your choice is saved on your device. You can change it at any time by clearing your browser's site data for this domain, which will bring the consent request back.

Measurement data is collected by Google Ireland Limited, acting as processor, and may be transferred outside the European Union under the European Commission's standard contractual clauses. The retention period is limited to fourteen months.

Regardless of this choice, we use your browser's local storage to remember your cookie decision, as well as the technical cookies set by our payment provider during the transaction, which are essential to secure it and prevent fraud. These uses are strictly necessary for the website to work and do not require your consent.

9. Your rights

You have the following rights over your data: access, rectification, erasure, restriction of processing, portability and objection. You may also set instructions regarding what happens to your data after your death.

To exercise these rights, write to infinitylodgegroup@outlook.fr stating your request. We may ask for proof of identity if there is reasonable doubt about the identity of the person making the request. We reply within one month, which may be extended by two months if the request is complex.

Some requests may be limited by our legal obligations: we cannot erase an invoice before the end of the legal retention period.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

10. Data protection officer

INFINITY LODGE has not appointed a data protection officer, as this is not mandatory for its activity. For any question about your data, write to infinitylodgegroup@outlook.fr.

11. Changes to this policy

This policy may be updated to reflect legal or technical changes. The date of the last update is shown at the top of the page. In the event of a substantial change, we will inform the people concerned by any appropriate means.