Privacy Policy

1. Introduction

Welcome to Havana Suites ("we," "us," or "our"), accessible at havanasuites.com. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

2. Information We Collect

2.1 Information You Provide Directly

When you voluntarily sign up, contact us, or use our forms, we may collect:

• Name — your first and/or last name
• Email address — to send you updates or respond to inquiries
• Interest area — e.g., real estate, investment, travel, construction, food industry (selected from a form dropdown or checkbox)
• Message content — if you contact us via a contact form

Providing this information is entirely voluntary. You are not required to submit any personal data to browse the website.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar tracking technologies, including:

• IP address (anonymized where possible)
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring URL (how you found our site)
• General geographic location (country/city level only)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and communicate with you
• To send periodic updates about Cuba-related market developments (only if you opt in)
• To improve our website content and user experience
• To analyze website traffic using aggregated, anonymized analytics
• To comply with applicable legal obligations

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Data Storage and Security

4.1 Where We Store Your Data

Personal information you submit through our forms is stored in Supabase, a cloud-hosted database platform. Supabase uses industry-standard encryption (AES-256 at rest, TLS 1.2+ in transit) and is hosted on Amazon Web Services infrastructure in the United States.

For Supabase's own privacy practices, see: https://supabase.com/privacy

4.2 Security Measures

We implement commercially reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no transmission over the Internet or electronic storage method is 100% secure, and we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the website to function properly. These cannot be disabled.
• Analytics Cookies (Google Analytics): We use Google Analytics to understand how visitors interact with our website. Google Analytics collects anonymized data about page visits, session duration, and traffic sources. Google's privacy policy: https://policies.google.com/privacy
• Preference Cookies: Remember your cookie consent choice (stored in localStorage).

5.2 Managing Cookies

You can control and/or delete cookies from your browser settings at any time. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Please note that disabling certain cookies may affect website functionality.

6. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

• Service Providers: With trusted vendors who assist in operating our website (e.g., Supabase for database hosting, Google for analytics). These parties are contractually obligated to keep your information confidential and use it only as directed.
• Legal Requirements: If required to do so by law, or in response to a valid legal process (e.g., subpoena, court order).
• Protection of Rights: If we believe disclosure is necessary to protect the rights, property, or safety of our website, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

7. Your Privacy Rights

7.1 Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restriction: Request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on our legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

7.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: Opt out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

7.3 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at:

info@havanasuites.com

We will respond to verified requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

8. Data Retention

We retain your personal information only as long as necessary for the purposes set out in this policy, or as required by law. Specifically:

• Contact form submissions and sign-up data: retained for up to 3 years, or until you request deletion.
• Analytics data: retained in accordance with Google Analytics' default retention settings (26 months).

You may request deletion of your data at any time by emailing us at info@havanasuites.com.

9. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will take steps to remove that information.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any site you visit.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your data, we ensure appropriate safeguards are in place in accordance with applicable law (such as standard contractual clauses for EEA transfers).

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@havanasuites.com
• Website: havanasuites.com

We are committed to resolving any privacy concerns promptly and transparently.