Privacy
Policy.

Last updated: 3 October 2026

Manoir de Lébioles takes the protection of your privacy seriously. This page explains which personal data we process when you visit this website or contact us, why we do so and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and Belgian law.

1. Data controller

SPRL Manoir de Lébioles
Domaine de Lébioles 1/5
B-4900 Spa (Creppe)

Telephone: +32 (0) 87 79 19 00
Email: [email protected]

For any question about your data, please write to this email address.

2. The data we process and why

Contact form
Name, email address, subject and message. We use this data only to answer your request. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering people who write to us.

Gift voucher orders
First name, surname, postal address, telephone, email address, name of the recipient, chosen option and message. This data is used to prepare, invoice and send you the gift voucher. Legal basis: performance of the contract.

Newsletter
Your email address, to send you our news and offers. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email or by writing to us. Our newsletters are sent with Brevo.

Online booking
Rooms, tables and treatments are booked on a secure external platform (Asterio, Septeo group), available at manoirdelebioles-4900-booking.myasterio.com. The data you enter there (identity, contact details, details of your stay, payment) is passed on to us to manage your booking. Payment data is processed by this platform and its payment providers; it does not pass through this website. Legal basis: performance of the contract and legal obligations (in particular accounting and guest registration).

Job applications
If you reply to a job offer, we use the information you send us only to handle your application.

Technical data
On each visit, our hosting provider automatically records technical data: IP address, date and time, page viewed, browser and operating system. This data is used to keep the website running and secure. Legal basis: our legitimate interest.

3. Cookies and measurement tools

A cookie is a small file stored on your device. This website uses the following tools, which set cookies or read information on your device:

• Google Tag Manager and Google Analytics: measuring visits to the website;
• Google Ads: measuring the effectiveness of our advertisements (conversion tracking);
• Meta Pixel (Facebook and Instagram): measuring and targeting our advertisements;
• Microsoft Clarity: anonymised analysis of browsing behaviour (clicks, scrolling) to improve the website;
• Metricool: visitor statistics.

These audience measurement and advertising tools rely on your consent, which you can refuse or withdraw at any time. You can also block or delete cookies in your browser settings, install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout) and manage Google’s personalised advertising at adssettings.google.com. Refusing these cookies does not prevent you from using the website.

4. External services loaded when pages are displayed

To display its pages correctly, this website loads resources from external services: fonts (Google Fonts and Adobe Fonts) and technical libraries (jsDelivr, Google Hosted Libraries). Your browser therefore connects to the servers of these providers, which receive your IP address. Legal basis: our legitimate interest in presenting the website consistently.

Messages sent from our forms are delivered to our mailbox by the Web3Forms service.

This website also contains links to YouTube, Instagram, Facebook and Google Maps. When you follow them, the privacy rules of those services apply.

5. Recipients and transfers outside the European Union

Your data is processed by our team and by the providers mentioned above, only as far as necessary for their task. We do not sell your data.

Some providers (Google, Meta, Microsoft, Adobe) are established in the United States or may process data there. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

6. Retention periods

• Contact requests: for as long as needed to answer and follow them up;
• Gift vouchers and bookings: for the duration of the contractual relationship, then for the statutory retention period for accounting documents;
• Newsletter: until you unsubscribe;
• Job applications: for the duration of the recruitment process, unless you agree that we keep them longer;
• Cookies: for the lifetime of each cookie, at most 13 months for audience measurement cookies.

7. Your rights

You can at any time ask to access, correct or erase your data, to restrict its processing or to receive it in a portable format, object to processing and withdraw your consent. Write to us at [email protected]: we will reply within one month. Proof of identity may be requested in case of doubt.

You also have the right to lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels, [email protected], www.dataprotectionauthority.be.

8. Security

This website is served entirely over HTTPS: exchanges between your browser and the website are encrypted. We restrict access to your data to the people who need it.

9. Changes

We may adapt this policy, in particular when the website or the law changes. The date of the last update is shown at the top of this page.