top of page

Privacy Policy

Purple Village  |  Last updated: 30 August 2026

In short: we use personal data to run our website, answer questions, manage interest and updates, publish guest content and, when bookings are open, arrange Purple Village stays. We do not sell your personal data.

​

1. Who are we?

​

Purple Village is a project of BA Group B.V., trading as Borahearts. BA Group B.V. is the data controller for the personal data described in this Privacy Policy.

​

Contact: info@purple-village.com  |  Freyjaplantsoen 65, 1363 WB Almere, the Netherlands.

Dutch Chamber of Commerce number: 99061562 |  www.purple-village.com

​

Some parts of this Privacy Policy apply only when bookings for a Purple Village edition are open. When you make a booking, we also process the personal data needed to arrange your stay, room matching and payment.If we later add travel services such as flights or package travel, we will update this Privacy Policy before collecting additional data for those services.

​​

2. What data do we use and why?​​​​​​​​​​​​​​​​​​​​​​​​

​

  • Interese list / interest check

Data and purpose: 

Name, email adress, preferred city or destination and other answers you choose to provide. We use this to understand interest and travel preferences for future Purple Village editions.

GDPR legal basis: 

Consent

​

  • Newsletter / updates

Data and purpose: 

Email adress, name and relevant preferences. We use this to send the updates you signed up for.

GDPR legal basis: 

Consent

​

  • Contact, WhatsApp and social media

Data and purpose: 

Email adress, phone number or username and the content of your message. We use this to answer your question and to communicate with you.

GDPR legal basis: Legitimate interests or steps prior to entering into a contract

​​

  • Testimonials / comminuty content

Data and purpose: 

The testimonial, photo or video and the name of username agreed with you.

GDPR legal basis: Consent

​​

  • Website and cookies

Data and purpose: 

Technical data such as IP adress, browser/device, website use and cookie preferences. Used for operation, security and, after consent where required, analytics or advertising.

GDPR legal basis:  Legitimate interests or steps prior to entering into a contract

​

  • Stay booking & room matching

Technical data such as IP adress, browser/device, website use and cookie preferences. Used for operation, security and, after consent where required, analytics or advertising.

GDPR legal basis: Performance of a contract; where appropiate, legitimate interests in organising the stay and room matching.

​

  • Payment & Invoicing

Payment status, amount, transaction and invoice information and data needed for refunds or administration. The payment provider may process payment details directly; we recieve what is needed to administer the payment and booking.

GDPR legal basis:  Performance of a contract and legel obligation

​

If you provide personal data about another person, for example when asking to share a room with a friend, please make sure that person knows that you are sharing their information with us.

Please do not provide health information or other sensitive personal data unless we specifically ask for it and it is necessary to arrange your stay or meet an agreed accessibility requirement. If we need this information, we will explain why and how it will be used.

​

3. Who do we share data with?

​

Depending on how you use our website or services, we may share personal data with the following categories of recipients where this is necessary:

  • Wix and connected services for website hosting, forms and technical functionality;

  • CookieYes for cookie preferences and consent management;

  • WhatsApp, Meta or other social media platforms when you use them to contact us;

  • the accommodation partner for the information needed for the reservation, guest list, room allocation and stay;

  • payment providers used for bookings and refunds, and our IT, e-mail and communication providers.

  • professional advisers, accountants or competent authorities where legally required or necessary.

For a stay outside the European Economic Area, necessary booking information may be shared with the accommodation partner in that country. International service providers may also process data outside the EEA. Where the GDPR requires it, we use appropriate safeguards such as an adequacy decision, Standard Contractual Clauses or another valid transfer mechanism.

​

4. How long do we keep data?

​

We keep personal data no longer than necessary. As practical starting points:

  • newsletter and interest-list data: for as long as you remain subscribed;

  • standalone interest-check data: normally no longer than 24 months;

  • contact messages: normally no longer than 12 months after the last substantive contact;

  • testimonials and content: for as long as we use them or until consent is withdrawn;

  • booking data: for as long as needed to perform the booking and handle follow-up, complaints or possible legal claims; after that we delete or anonymise it;

  • booking data: for as long as needed to perform the booking and handle follow-up, complaints or possible legal claims; after that we delete or anonymise it;

  • payment, invoice and basic tax administration: for the applicable statutory retention period, generally 7 years in the Netherlands.

We may retain information longer where necessary for a legal dispute, fraud investigation or another legal obligation.

​

5. Cookies

​

We use necessary cookies to make the website work. For non-essential analytics, tracking or advertising cookies, we ask for consent where legally required. You can change your choices through our cookie settings. More information is available in our Cookie Policy.

​

6. Your rights

​

Under the GDPR, depending on the circumstances, you may ask to access, correct, delete, restrict or receive your personal data. You may object to certain processing and withdraw consent at any time. For privacy requests, email info@purple-village.com. We will respond within the period required by law, normally within one month. We may ask for additional information if this is reasonably necessary to confirm your identity.

We do not use personal data to make decisions that have legal or similarly significant effects based solely on automated processing. Room matching is not based solely on an automated decision.

​

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens: www.autoriteitpersoonsgegevens.nl

​

7. Security and changes

​

We take appropriate technical and organisational measures to protect personal data and limit access to people and service providers who need it. We update this Privacy Policy when our activities or data processing change. The date at the top shows when this version was last updated.

 

Privacy questions? Contact us at info@purple-village.com.

bottom of page