OI Collection Rentals Last updated: 20 September 2026
This Privacy Policy explains how we collect and use personal data when you visit oicollectionrentals.com (the “Website”) or book one of our properties directly with us. We only collect what we need, and we do not sell your data.
1. Who is responsible (Controller)
Caroline Lechaux, trading as OI Collection Rentals 36 rue Broca, 75005 Paris, France (SIREN 833 560 451) Email: info@oicollectionrentals.com (or info@oicrentals.com)
We are the controller for personal data processed through the Website. This policy is governed by the EU General Data Protection Regulation (GDPR) and French data protection law.
2. What we collect, why, and on what legal basis
Booking and enquiry data — your name, email, phone number, stay dates, number of guests and any message you send us. We use this to answer enquiries and to prepare and perform your booking. Legal basis: performance of a contract or steps taken at your request (Art. 6(1)(b) GDPR).
Payment data — when you book directly, payment is processed by Stripe. Card details are entered on Stripe’s secure systems; we do not see or store your full card number. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Newsletter — if you sign up (including via the signup pop-up), we store your name (if provided) and email address and, if you choose to give it, your phone number. We use a confirmed (double opt-in) sign-up: after you register we send a confirmation email, and we only add you to our list once you click the link in it. We use these details to send you occasional news, open dates and direct-booking offers by email. If you provide your phone number — which is optional and not required to subscribe — you also consent to receive occasional offers and updates from us by SMS or WhatsApp. You can unsubscribe or withdraw your consent at any time via the link in every email or by contacting us at info@oicollectionrentals.com. Legal basis: your consent (Art. 6(1)(a) GDPR).
Analytics data — with your consent, we use Google Analytics to understand in aggregate how visitors use the Website (for example pages viewed and time on site), so we can improve it. Legal basis: your consent (Art. 6(1)(a) GDPR).
Server log data — our hosting provider automatically records technical data such as your IP address, browser type and time of access, to keep the Website secure and running. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR).
3. Cookies and consent
We use two kinds of cookies:
Our Website also loads Google Fonts and a Trustindex widget that displays our Google guest reviews; these may involve a connection to the providers’ servers as described below.
4. Who we share data with (Processors and recipients)
We share personal data only with the service providers we need to run the Website and your booking. Each acts under a data processing agreement and only on our instructions:
We may also disclose data where required by law or to establish, exercise or defend legal claims.
Bookings through third-party platforms. If you book one of our properties through Airbnb, Booking.com or Abritel/VRBO, that platform collects your data under its own privacy policy as an independent controller. We receive from it only the booking data needed to host your stay.
5. International transfers
Our main providers are established in the EU. Where a provider (for example Google or Stripe) processes data outside the EU/EEA, such as in the United States, that transfer is protected by appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework. Our hosting providers Web Hosting Hub and GoDaddy are established in the United States; the same safeguards apply.
6. How long we keep your data
We keep personal data only as long as necessary for the purpose it was collected: booking and payment records for as long as needed to provide the stay and to meet legal, tax and accounting obligations; newsletter data (including any phone number) until you unsubscribe; analytics data for the retention period configured in Google Analytics. We then delete or anonymise it.#
7. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, contact us at info@oicollectionrentals.com.
You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL (www.cnil.fr) — or with the authority in your country of residence.
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
8. Visitors from the United States
For residents of California and other US states: we do not sell personal information, and we do not meet the revenue or volume thresholds that would make the CCPA applicable to us. We handle the limited data described above only for the purposes stated.
9. Changes to this policy
We may update this Privacy Policy from time to time. The current version, with its “Last updated” date, always applies and is published on this page.
Questions about this policy or your data: info@oicollectionrentals.com