This Privacy Policy is issued by My Laguna Stay Inc., operating as Sunset Cove LLC ("we," "us," or "our"), the owner and operator of Sunset Cove Villas — eight oceanfront luxury villas located at 683 Sleepy Hollow Lane, Laguna Beach, California 92651 ("the Property").

This Policy explains how we collect, use, store, share, and protect personal information when you visit our website at lagunabeachvillarentals.com, make a reservation, stay at our property, or otherwise interact with us.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

We collect personal information in several ways — directly from you, through your booking, and automatically through our website. We collect only what we need to provide excellent service.

We use your information only for the purposes described below. We rely on the following legal bases for processing:

We do not sell, rent, or trade your personal information. We share information only with trusted service providers who help us deliver our services, and only to the extent necessary.

Our villas are listed on third-party booking platforms including Airbnb, VRBO, Expedia, and Booking.com. When you book through these platforms:

• The platform collects and controls your data in accordance with its own privacy policy. We encourage you to review the privacy policy of whichever platform you use to make your reservation.
• The platform shares a subset of your booking data with us (typically: name, email, stay dates, villa, and guest count) to fulfil your reservation.
• We process this shared data under this Privacy Policy.
• We do not have control over data the platform retains independently, nor can we fulfil data deletion requests on behalf of any booking platform.
• Reviews submitted through booking platforms are subject to that platform's terms and are outside our control.

For direct bookings through lagunabeachvillarentals.com, we are the sole data controller and this Privacy Policy applies in full.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how visitors use the site.

Managing Cookies: You can control cookie settings through your browser preferences, or by using our cookie consent tool (if displayed). Please note that disabling essential cookies will affect the functionality of the website. Opting out of analytics cookies will not affect your ability to book.

For more information about cookies and how to manage them, visit allaboutcookies.org.

We take the security of your personal information seriously and employ a range of technical and organisational measures to protect it:

• Encryption in transit: Our website uses TLS/SSL encryption. All data transmitted between your browser and our servers is encrypted.
• Payment security: Card payments are handled by PCI-DSS compliant processors. We never store full card numbers on our own servers.
• Access controls: Access to personal data is limited to staff and contractors who need it to perform their duties, and is subject to confidentiality obligations.
• System security: Our systems are protected by firewalls, intrusion detection, and regular security reviews.
• Identity verification: We verify guest identity at check-in to protect both our guests and the property.

While we take every reasonable precaution to protect your data, no system or transmission over the internet can be guaranteed 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Reservation and financial records: Retained for a minimum of 7 years from the checkout date to comply with tax, accounting, and regulatory obligations under California and federal law.
• Identity verification documents: Retained for the duration of the rental and for a reasonable period thereafter (typically 6–12 months), then securely destroyed.
• CCTV footage: Common area footage is retained for a maximum of 30 days, then automatically overwritten, unless required as evidence of an incident.
• Marketing preferences: Retained until you withdraw consent or opt out. We honour unsubscribe requests within 10 business days.
• Website analytics data: Anonymised and aggregated analytics data may be retained for up to 24 months.
• Contact and enquiry records: Retained for up to 3 years from the date of last contact.

Upon expiry of the retention period, data is securely deleted or anonymised so it can no longer be associated with you.

Our website and booking services are not directed at or intended for children under the age of 13. We do not knowingly collect personal information from children under 13. All reservations must be made by an individual who is at least 25 years of age (our minimum booking age requirement).

If you believe we have inadvertently collected personal information from a child under 13, please contact us immediately at the details provided in Section 12, and we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Post the revised Policy on our website at lagunabeachvillarentals.com/privacy-policy/.
• Where required by law, notify you directly by email.

Your continued use of our website or services after changes are posted constitutes your acknowledgement and acceptance of the updated Policy. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to submit a verifiable consumer request, please contact us:

We aim to respond to all privacy-related enquiries and requests within 10 business days. For verifiable consumer requests under CCPA, the statutory response time is 45 days, with one possible 45-day extension if necessary.