Effective date: 28.10.2026
This policy explains how La Petite Forêt handles personal data when you browse our website, enquire about a property, book a stay, contact us about property management, or subscribe to updates. It also explains your choices and data protection rights.
La Petite Forêt is the trading name of La Petite Foret Belgium BV, registered under 0771.290.550 with its registered office at Louwijn 39A, 1730 Asse, Belgium. VAT number: BE0771290550. This entity is the controller for the processing described in this policy.
Contact us about privacy or exercise your rights at hello@lapetiteforet.net, or by post at the registered address above. Please identify your booking or enquiry where relevant.
We receive information directly from you through enquiries, reservations, correspondence, newsletter sign ups and property management enquiries. We may also receive relevant booking details from the person booking for your group, the property provider, or a booking platform you use.
Depending on your interaction, this includes your name, contact details, billing information, selected property, stay dates, guest numbers, booking preferences, correspondence, payment status, transaction references and complaints. For property management enquiries, it may include property details and information about ownership or management authority.
We collect identification or guest registration information only where required by applicable law or reasonably necessary for a justified identity check. Information about children is limited to what is needed for the stay, such as ages for occupancy or pricing. Our website is directed at adults arranging stays, rather than at children.
If you choose to tell us about accessibility or other needs that reveal health information, we use that information only as necessary to assist you and on an appropriate legal basis, such as your explicit consent. Please avoid including unnecessary medical details in an enquiry.
Our website and service providers may process IP addresses, device and browser information, security logs and booking session information. Optional analytics or advertising tracking is subject to the choices explained in our Cookie Policy.
We accept credit card payments through Stripe and payments by bank transfer. For card payments, Stripe processes the payment credentials. We receive information needed to administer the booking and payment, which may include the payer’s name, billing details, payment status, transaction reference, card type and last four digits of the card number.
For bank transfers, we process the information accompanying the payment, such as the payer’s name, amount, payment date and reference. Depending on the information supplied by the banks involved, this may also include the payer’s IBAN or other account details. We use this information to match payments to bookings, maintain accounting records, handle refunds and resolve payment queries.
Purpose | Legal basis |
|---|---|
Answer enquiries, provide quotations, manage bookings and deliver your stay | Steps at your request before a contract and performance of a contract |
Meet guest registration, accounting, tax and other statutory requirements | Compliance with a legal obligation that applies to us |
Secure the website, prevent fraud, resolve complaints and establish or defend claims | Legitimate interests in operating a secure business and protecting legal rights, subject to your rights |
Send optional newsletters and promotional messages | Your consent; making a booking does not itself subscribe you |
Optional analytics, advertising and similar tracking | Consent where required for the technology and associated processing |
Respond to property management enquiries | Precontractual steps or legitimate interests in answering business enquiries |
Where we rely on legitimate interests, we consider the necessity of the processing and its effect on you. You may ask us for more information and object where the law gives you that right. Where we rely on a legal obligation, you may ask which requirement applies to your circumstances.
We may send booking confirmations, payment reminders, arrival instructions and other messages necessary for your reservation without treating them as marketing. Optional newsletters and offers are separate. You can withdraw marketing consent at any time using the unsubscribe link or by emailing us. Withdrawal does not affect processing carried out lawfully before it was withdrawn.
We use Boostly Limited’s CRM and email marketing services to manage customer contact records, newsletter subscriptions, marketing preferences and related communications. For these activities, Boostly processes personal data on our behalf and under our instructions. This may include your name, email address, subscription status and marketing consent records.
We share only information needed for the relevant task with accommodation providers and authorised staff or local teams arranging your stay; booking and property management systems; website hosting and support providers; payment providers; communication and newsletter services; professional advisers; and authorities where disclosure is legally required. A booking platform or payment provider may process information as an independent controller under its own privacy notice.
Our principal technology providers and communication channels are:
We share personal information with these providers only as needed for the relevant service. Where a provider processes information for its own purposes as an independent controller, its own privacy notice also applies.
We do not use guest contact information for unrelated third party marketing without an appropriate legal basis. Reviews are published only where we have a lawful basis and the necessary permission or platform rights; private booking details are not included.
Our service providers may process personal information outside the European Economic Area (EEA), including through overseas hosting, technical support or subprocessors.
For processing in the United Kingdom, transfers may rely on the European Commission’s adequacy decision for the United Kingdom, renewed in December 2025. This does not automatically cover onward transfers to other countries.
Stripe processes personal information internationally, including in the United States. Stripe identifies the EU–US Data Privacy Framework as its primary transfer mechanism where applicable, with European Commission Standard Contractual Clauses and other relevant safeguards applying as described in its Data Transfers Addendum.
Other transfers outside the EEA require an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses adopted under Implementing Decision (EU) 2021/914, together with additional safeguards where required.
For information about international transfers and applicable safeguards, contact hello@lapetiteforet.net.
We retain personal information for the periods described below. Once it is no longer required, we delete it or anonymise it. Where particular records are needed for an ongoing dispute, investigation or legal obligation, we retain only the relevant information until that requirement ends.
Record category | Retention period or deletion rule |
|---|---|
Unconverted enquiries | Until the enquiry and any requested follow-up have been completed, unless the correspondence is needed for a subsequent booking or dispute. |
Booking and guest service records | For the reservation and the resolution of outstanding payments, refunds, deposits or complaints. Relevant contractual evidence may be retained for the applicable legal claim period; accounting records are retained separately as required by law. |
Accounting and tax records | For the statutory retention period applicable to the document and tax concerned, including any longer period required for property-related records or an ongoing tax investigation. |
Identification and statutory guest registers | For the period required by the laws applicable to the property concerned. Where identity verification is necessary, copies of identification documents are not retained beyond that purpose unless legally required. |
Newsletter contact and consent records | While the subscription remains active. Following withdrawal, we stop marketing and retain only the information needed to record the withdrawal, prevent further marketing and demonstrate compliance. |
Security logs and backups | For the period necessary to detect and investigate security incidents and maintain recovery capability. Backup copies expire through the relevant backup rotation and are not used for ordinary business purposes. |
Cookies and related identifiers | For the durations stated in our Cookie Policy and cookie inventory, subject to your consent choices where applicable. |
Subject to the conditions in applicable law, you may request access, correction, erasure, restriction of processing and a portable copy of data. You may object to processing based on legitimate interests and may object to direct marketing at any time. Where processing is based on consent, you may withdraw it. Some information must be retained despite a request, for example to comply with law or defend legal claims.
Email hello@lapetiteforet.net to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month; if a lawful extension is necessary, we explain the reason within that initial period. You may complain to the supervisory authority where you live or work or where an alleged infringement took place. Depending on the circumstances, this may include the Belgian Data Protection Authority or the UK Information Commissioner. Contacting us first is helpful but is not a condition of your right to complain.
9. Required information security and automated decisions
Fields marked as required are needed to answer the request, process the booking or meet a stated legal requirement. If you do not provide necessary information, we may be unable to deliver that service. Optional marketing consent is not required to book.
We use proportionate technical and organisational measures, including access controls and appropriate safeguards for service providers, to protect personal data. No system can guarantee absolute security. We do not make decisions about guests based solely on automated processing, including profiling, that produce legal or similarly significant effects. Our payment providers and booking platforms may carry out their own automated fraud prevention and payment checks, as explained in their respective privacy notices.
Our Cookie Policy explains storage and tracking technologies and how to change preferences. External websites have their own privacy notices. We update this policy when our processing changes and show the effective date above. A policy update or continued browsing is not consent to a new processing purpose.
