# Privacy for business customers

Effective date: **23 October 2026**

## Who is responsible

Visitar Ltd, company number 17392313, is responsible for the business contact, billing and service information used to provide Enhanced Listing and Visitar Direct. Our registered office is Flat 48 Cedar House, Lensbury Avenue, London, England, SW6 2GU. Contact **hoteles@visitar.com** about this notice or your data.

## What we collect and why

When you enquire or buy, we use your email address, business name, billing address, order, payment and subscription references, service choices and correspondence. We use this information to take steps you request before a contract, provide the service, arrange setup, manage renewals, answer questions and handle cancellations or refunds. We retain information needed for accounting and other legal obligations. We also use information where reasonably necessary to protect the service from fraud, maintain security and resolve disputes, relying on our legitimate interests.

You may provide website content, business details, photographs and other material during setup. Only send information you are entitled to share and that is needed for the service. We do not use checkout details to subscribe you to marketing without an appropriate basis.

## Payments and other providers

Stripe hosts checkout and processes payment details. Visitar receives the information needed to identify your payment and manage your subscription, including payment status and limited payment-method information. We do not receive the full card number or security code through this checkout. Stripe also uses information for its own payment, security and legal purposes under its privacy policy, available on the checkout page.

Our authorised team and technical providers may access information as needed for hosting, email, support, security and service administration. We may disclose information where legally required or necessary to establish, exercise or defend legal claims. We do not sell your personal data. Where information is processed outside the UK or EEA, we use applicable data-transfer safeguards. Contact us for information about the safeguards relevant to your data.

## Retention and security

We retain information for as long as needed to provide and support the service and meet accounting, legal and dispute-resolution requirements. The period depends on the type of information and applicable obligations. When it is no longer needed, we delete or anonymise it. We use appropriate access controls and security measures; no system can guarantee absolute security.

## Website and customer information

The visitar.direct purchase buttons are ordinary links to Stripe. This website does not embed a payment form or collect card details. Stripe's checkout may use its own cookies and similar technologies; its notices and choices apply there.

This notice covers your business relationship with Visitar. Before processing your customers' personal data on your behalf through a hosted website, we will agree the required data-processing arrangements. Your business remains responsible for its own customer-facing privacy information and lawful instructions.

## Your rights and complaints

Depending on the circumstances and applicable law, you can request access, correction, deletion, restriction or portability of your personal data, and object to certain processing. Where processing relies on consent, you can withdraw it. Some information must still be retained to meet legal obligations. Email **hoteles@visitar.com** to make a request or complaint. We may need to verify your identity. You can also complain to the UK Information Commissioner's Office or the relevant data-protection authority in your country.

We will update this dated notice when our practices change. A downloadable copy is available on this page.