Tucasa Privacy Policy
Last Updated: February 4, 2026
Tucasa Group LLC, together with its affiliates and subsidiaries (collectively, “Tucasa,” “we,” “us,” or “our”), values your trust and recognizes that privacy is important to you. This Privacy Notice explains how we collect, use, share, and protect your Personal Data when you interact with Tucasa.
This Privacy Notice applies to Personal Data collected in connection with your use of Tucasa’s websites, services, digital platforms, and offline interactions (collectively, the “Services”).
Scope of This Privacy Notice
This Privacy Notice describes the privacy practices of Tucasa for Personal Data we collect in connection with:
- Tucasa websites, including www.staytucasa.com and other Tucasa-owned or operated websites (the “Websites”);
- Contact forms, inquiries, and registrations related to villa stays, residences, concierge services, and partnerships;
- Your stay or visit at Tucasa-listed villas or residences and your use of hospitality, lifestyle, and concierge services;
- Communications with us via email, phone, SMS, WhatsApp, or other messaging platforms;
- Tucasa social media pages (the “Social Media Pages”);
- Online purchases or payments processed through Tucasa;
- Marketing communications and preferences;
- Software applications, automated tools, and chat functionalities provided by Tucasa;
- Personal Data received from third parties such as property owners, property managers, travel advisors, booking platforms, or public databases.
When required by law, we will request your consent for specific data processing activities or provide separate notices tailored to those activities.
Types of Personal Data We Collect
“Personal Data” means information that identifies you or relates to an identifiable individual.
Categories of Personal Data We Collect
We may collect the following types of Personal Data:
Identifying and Contact Information
Full name, salutation, date of birth, email address, phone number, postal address, nationality, social media identifiers, profile images, and other information you make publicly available or provide to us.
Financial Information
Payment card details, billing information, transaction history, and related payment data (processed securely by authorised payment providers).
Government Identification
Passport details, visa information, or other identification where required for bookings, verification, or legal compliance.
Travel and Stay Information
Arrival and departure dates, travel itineraries, accommodation preferences, language preferences, group details, and travel agent information.
Villa Stay & Service Interactions
Booking history, concierge requests, dining preferences, housekeeping needs, childcare requests, wellness or spa services, experiences booked, and feedback.
Marketing & Communication Preferences
Newsletter subscriptions, communication preferences, survey responses, and promotional engagement.
Technical & Usage Data
IP address, approximate location, browser type, device type, operating system, screen resolution, cookies, pixel tags, and similar technologies.
Additional Information We May Collect (Where Permitted by Law)
- Information about family members or companions (e.g., names and ages of children);
- Important dates such as birthdays or anniversaries;
- Guest preferences, interests, likes/dislikes, and lifestyle preferences;
- Health-related accommodations relevant to service delivery (e.g., dietary restrictions, mobility needs);
- CCTV images and video recordings in public areas of properties for security purposes;
- Survey responses, complaints, incident reports, or emergency communications;
- Information relating to journalists, business partners, consultants, or vendors visiting Tucasa properties.
Methods of Personal Data Collection
We collect Personal Data through the following sources:
Online Services
Data collected through website browsing, inquiries, reservations, payments, social media engagement, and newsletter sign-ups.
Villa Stays & On-Property Services
Information provided during check-in, concierge requests, dining, wellness services, childcare, and on-site experiences.
Customer Support & Communications
Personal Data shared via phone, email, SMS, WhatsApp, or customer service interactions. Calls may be recorded for quality and training purposes.
Property Owners & Managers
Personal Data shared by owners or management partners of Tucasa-listed properties.
Partners & Third Parties
Data received from booking platforms, travel advisors, marketing partners, analytics providers, or publicly available sources.
Internet-Connected Devices
Information collected when guests connect to property Wi-Fi or use smart devices provided at accommodations.
How We Use Personal Data
We use Personal Data for the following purposes and legal bases:
| Purpose | Description | Legal Basis |
|---|---|---|
| Bookings & reservations | Manage reservations, payments, inquiries, and stay logistics | Contractual necessity |
| Guest experience | Personalised services, concierge, on-site recognition | Legitimate interests, consent |
| Communications | Service updates, confirmations, surveys, and marketing | Consent, legitimate interests |
| Marketing & promotions | Newsletters, campaigns, audience segmentation | Consent, legitimate interests |
| Security & safety | CCTV monitoring, incident documentation | Legal compliance, legitimate interests |
| Legal & compliance | Responding to authorities, AML, fraud prevention | Legal obligation |
| Business operations | Audits, analytics, service improvements | Legitimate interests |
| Anonymisation | Creating aggregated or anonymised datasets | Legitimate interests |
Sharing and Disclosure of Personal Data
We may share Personal Data with:
- Tucasa Affiliates for operational, marketing, and service delivery purposes;
- Property Owners & Managers of Tucasa-listed homes, with limited usage rights;
- On-Property & Lifestyle Service Providers (chefs, wellness providers, transportation, experiences);
- Technology & Digital Service Providers (hosting, payments, CRM, analytics, email delivery);
- Advertising & Marketing Partners in line with your preferences and applicable law;
- Public Authorities where required by law or legal process;
- Business Transaction Counterparties in connection with mergers, reorganisations, or asset sales.
Your Options for Managing Your Personal Data
You may opt out of:
- Marketing emails by using the unsubscribe link or emailing data@staytucasa.com
- Marketing data sharing with affiliates by contacting us at data@staytucasa.com
Administrative or transactional communications may still be sent.
Other Important Information
Data Retention
We retain Personal Data only as long as necessary for the purposes outlined or as required by law.
Security
We implement reasonable technical and organisational safeguards. No system is completely secure — please notify us immediately if you suspect a security issue.
Sensitive Data
We only collect sensitive data where necessary. Please do not send sensitive Personal Data unless requested.
Minors
Our Services are not intended for individuals under 18 years old.
International Transfers
Your Personal Data may be transferred and processed outside your country of residence, including the United States, with appropriate safeguards in place.
Contacting Us
Tucasa Group LLC is the data controller responsible for your Personal Data.
Contact Email: data@staytucasa.com
We will respond to privacy requests in accordance with applicable law.
Additional Privacy Provisions by Region
EU / EEA / UK / Turkey
You may request access, correction, deletion, restriction, portability, or object to processing. Requests are handled within one month.
United States
You may exercise rights to know, delete, correct, opt-out of sharing/targeted advertising, and limit use of sensitive information where applicable.
People’s Republic of China
We process personal data in accordance with PRC law, obtain consent where required, and allow access, correction, deletion, and objection rights within 30 working days.