Last updated 14 September 2026
Villa Takali is a private beachfront estate at Loloma Beach, Pacific Harbour, Fiji, let to one party at a time. This page explains what we do with the small amount of personal information the website collects, and what cookies it uses.
If you have a question about any of it, write to info@villatakali.com.
What we collect
When you enquire. The enquiry form asks for your name, your email address, and whatever you choose to tell us about your dates, your party and what you are hoping for. We use it to answer you and, if you go on to book, to arrange your stay. Enquiries are stored in the website and in our email.
When you simply visit. Our host keeps standard server logs, which include your IP address, the pages you requested and the time you requested them. These are used to keep the site running and to defend it against attack.
Website statistics. We use Burst Statistics, which runs on our own server and keeps what it records in this website’s own database. It sets no cookie, it does not fingerprint your device, and none of it is sent to anybody else. So that two pages read in one afternoon are not counted as two different people, it makes a short anonymous code from your IP address, your browser type and a secret value that changes every day, which means the same person cannot be recognised from one day to the next. This runs whether or not you accept cookies. If your browser sends a Do Not Track signal, the visit is not recorded at all.
Our host’s own measurement. GoDaddy, who host this site, add scripts of their own to every page and set the cookies listed below as belonging to them. These load before you answer the cookie notice and are outside the choice it offers. They are GoDaddy’s rather than ours and we do not have access to what they gather.
Typefaces. The fonts the site is set in are delivered by Google’s font service, so Google receives your IP address when a page loads. This also happens on every page, before any choice about cookies.
The enquiry form. The form is protected by Cloudflare Turnstile, which checks that a person rather than a machine is filling it in. Cloudflare receives your IP address and some information about your browser in order to make that check. Cloudflare state that it is not used to follow people around other websites.
If you accept cookies. We use Google Analytics to see roughly how many people visit, which pages they read and which country they came from. It is switched off until you accept it, and it is configured so that your IP address is shortened before it is stored.
We do not sell anything to anyone, we do not run advertising, and we do not share your details with advertisers or data brokers.
Cookies this site uses
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| vt_consent | Villa Takali | Remembers whether you accepted cookies, so we stop asking | 180 days |
| _ga, _ga_RP7N4ZGQTS | Google Analytics | Tells one visitor apart from another and one visit from another. Only set after you accept | Up to 2 years |
| wordpress_*, wp-settings-* | WordPress | Only set for people who log in to run the site. Ordinary visitors never receive these | Session to 1 year |
| wfwaf-* | Wordfence | Security. Helps block attacks on the site | Session |
| _tccl_visitor, _tccl_visit, _scc_session, fs_uid, fs_lua, cp_challenge | GoDaddy, our host, and our security provider | Their own measurement of traffic to the sites they host, and protection of the servers. Set on every page, before and regardless of the choice you make here | Varies |
If you choose Essential only, no Google Analytics cookies are set at all, and Burst sets none whichever you choose. The cookies our host and our security provider set, listed above, sit outside that choice. You can change your mind at any time using the cookie settings link, and you can delete cookies in your browser whenever you like. If your browser sends a Global Privacy Control signal we treat that as Essential only without asking.
Who else sees your information
- Our hosting and security providers, who run the servers and the content network the site is delivered from.
- Our email provider, which carries the messages between you and us.
- Google, for analytics, and only once you have accepted.
- The people who run an activity you ask us to book, such as a dive operator or a charter, who need your names and dates to take the booking.
- Cloudflare, who check that the enquiry form is being completed by a person rather than a machine.
- Google, a second time, because their font service delivers the typefaces the site is set in and therefore sees your IP address on every page.
Some of these are outside Fiji, so your information may be handled in other countries, including in the United States and the European Union.
How long we keep it
Enquiries that do not turn into a booking are kept for two years, in case you come back to us. Booking correspondence is kept for seven years, because it forms part of our business records. Google Analytics data is kept for fourteen months. Our own visitor statistics stay in this website’s database, and the anonymous daily codes described above are discarded after twelve months. Server logs are kept for a short period by our host.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it. Write to info@villatakali.com and we will deal with it within thirty days. If you are in the United Kingdom or the European Union you also have the right to complain to your national data protection authority.
Changes
If we change how any of this works we will update this page and change the date at the top.