Privacy Policy
How we use your data and your rights
Last updated: May 2026
This privacy policy explains how Sonshines Florida Villa collects and uses information when you visit this website or contact us.
Who We Are
The data controller is Sonshines Florida Villa, a privately owned holiday rental property located at Old Mill Circle, Kissimmee, Florida 34746. You can contact us via the contact form on this website.
What Data We Collect
We collect two types of data:
- Analytics data — if you accept cookies, Google Analytics collects anonymised information about your visit: pages viewed, approximate location (country/region), device type, and browser. This data is aggregated and cannot identify you personally. It is only collected after you give consent.
- Enquiry data — if you submit the contact form, we receive your name, email address, phone number (if provided), and the message you send. This is processed by Formspree (our form provider) and used solely to respond to your enquiry.
Cookies
We use two categories of cookies:
- Strictly necessary — reCAPTCHA (Google) is used on the contact form to prevent spam. These cookies are set regardless of your preference and do not require consent.
- Analytics (optional) — Google Analytics sets
_gaand_ga_*cookies with a 2-year expiry. These are only set after you click "Accept" on the cookie banner. You can decline or withdraw consent at any time.
Third Parties
- Google Analytics — analytics service. Google Privacy Policy. Only active after consent.
- Formspree — processes contact form submissions. Formspree Privacy Policy.
- Google reCAPTCHA — spam protection on the contact form. Strictly necessary.
- Vrbo — our booking platform. When you click "Book on Vrbo" you leave this site and are subject to Vrbo's Privacy Policy.
Legal Basis for Processing
- Analytics cookies — your consent (UK GDPR Art. 6(1)(a)). You can withdraw at any time.
- Contact form data — our legitimate interest in responding to enquiries (UK GDPR Art. 6(1)(f)).
- reCAPTCHA — our legitimate interest in protecting the contact form from spam.
Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate data
- Erasure of your data ("right to be forgotten")
- Object to processing based on legitimate interest
- Withdraw consent for analytics cookies at any time (see below)
- Complain to the Information Commissioner's Office (ICO)
To exercise any of these rights, please contact us.
Withdrawing Cookie Consent
To withdraw your consent to analytics cookies, clear your browser's localStorage for this site (DevTools → Application → Local Storage → delete the sonshines_consent key) or clear your browser cookies. The consent banner will reappear on your next visit and you can choose to decline. You can also use your browser's built-in cookie controls or an extension such as uBlock Origin to block analytics entirely.
Data Retention
Analytics data is retained in Google Analytics for 14 months (the minimum available setting). Contact form submissions are retained in our email inbox for as long as necessary to handle your enquiry and are not shared with third parties.
Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review it periodically.