Your data
Privacy policy
What we collect, why, for how long, and how to take back control. Version in force on 2 August 2026.
1. Data controller
Haliviera, sole trader, 7 rue Halévy, 06000 Nice, France. For any question about your data, use the contact form.
2. What we collect
Contact form: your name, e-mail address, the dates you have in mind if you give them, the content of your message, plus your IP address and a timestamp, kept only to limit automated submissions.Booking: what is needed for the stay, name, contact details, dates, number of guests, and in some cases a copy of an identity document. Payments are handled by our booking system, Smoobu; we never store card details.Browsing: this site uses no advertising cookies. Two items are stored in your browser without your consent, because they are essential: the language you chose and, in the guest area, your session. Audience measurement is only switched on after you agree, and is described in section 7.3. Why we use it
To answer your messages, prepare and deliver your stay, meet our legal and accounting obligations, and protect the form against automated submissions. The legal basis is, depending on the case, performance of the contract, your consent, or our legitimate interest in keeping the site working.
4. Who has access
We do, along with the providers the service depends on: Smoobu for booking and payment, our host for the website and e-mail. Two third-party services are loaded by your pages: Google Maps for the neighbourhood map and Google Fonts for the typefaces. Loading them sends your IP address to Google, under its own privacy policy.
Your data is never shared with or sold to third parties, nor rented, nor passed on for advertising purposes. If you agree to receive news about the studio, that agreement applies to Haliviera only, and can be withdrawn at any time with a simple message.
5. How long we keep it
Messages received through the form are kept for three years after the last exchange. Booking data is kept for the length of the contract, then ten years for accounting records, as the law requires. Copies of identity documents are stored securely and deleted one month after the stay. The other information collected when registering travellers is kept for one year, then erased. For your peace of mind, we accept identity certificates and watermarked documents, which some countries offer their citizens.
6. Your rights
You may ask for access to your data, its correction or deletion, a restriction of processing, or object to it. Use the contact form and we answer within a month.
If our answer does not satisfy you, you may contact the CNIL, the French data protection authority.
7. Cookies and audience measurement
This site sets two kinds of cookies. The first are essential: they remember your language and, in the guest area, your session. They serve nothing else and do not require your consent.
The second measure how the site is used, through Google Analytics. They are only set after you agree, which is asked on your first visit. Until you accept, no identifier and no IP address is sent to Google. Declining changes nothing about how the site works.
You may change your mind at any time: reopen the consent window. Your decision is kept for six months, after which the question is asked again.
8. Security
The site is served over HTTPS. Access to messages and booking data is password protected and limited to the people who run the studio.
9. Updates
This policy may change. The version published on this page is always the one that applies.