Privacy and Data Protection Policy

This Privacy Policy describes how Boonstay Vacation Homes Rental LLC ("Boonstay Vacation Homes", "we", "us", or "our") handles personal data collected through our website and services. We are committed to protecting your privacy and to handling your data in line with the data protection laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

By using our website or booking a stay with us, you agree to the practices described in this policy.

We may collect the following categories of personal data:

• Identity and contact data: name, email address, phone number, postal address, and nationality.
• Booking data: stay dates, property selected, number of guests, special requests, and travel preferences.
• Payment data: billing details and transaction records. Full card numbers are processed by our payment providers and are not stored on our servers.
• Verification data: identification documents where required by law or building regulations for check-in.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies.
• Communications: messages you send us by email, phone, chat, or web forms.

We use your personal data to:

• Process and manage your bookings and payments.
• Provide guest support before, during, and after your stay.
• Verify identity and comply with legal and regulatory obligations.
• Send booking confirmations, service updates, and important notices about your stay.
• Improve our website, services, and customer experience through analytics.
• Send marketing communications where you have agreed to receive them. You can opt out at any time.
• Detect, prevent, and address fraud, security issues, and misuse.

We process your data where it is necessary to perform our contract with you (for example, to complete a booking), to comply with a legal obligation, for our legitimate business interests, or on the basis of your consent. Where we rely on consent, you may withdraw it at any time.

Our website uses cookies and similar technologies to keep the site working, remember your preferences, and understand how visitors use our pages. We may use analytics and tag management tools, such as Google Tag Manager, to measure and improve performance.

You can control or disable cookies through your browser settings. Disabling some cookies may affect how parts of the site function.

We may share your personal data with:

• Service providers: payment processors, hosting providers, cleaning and maintenance teams, and support tools that help us operate.
• Booking platforms: where your reservation originates from a partner channel such as Airbnb, Booking.com, or similar.
• Authorities: government bodies or regulators where required by law, including tourism and residency authorities in the UAE.

We do not sell your personal data. We require third parties to protect your data and to use it only for the purposes we specify.

Some of our service providers may process data outside the United Arab Emirates. Where this happens, we take steps to ensure your data receives an adequate level of protection in line with applicable law.

We keep personal data only for as long as needed to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it.

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include secure transmission, access controls, and the use of reputable payment providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request deletion of your data where there is no legal reason to keep it.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding.

Our services are not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised "last updated" date. We encourage you to review it periodically.

If you have questions about this policy or how we handle your data, please contact us:

• Email: info@boonstay.co
• Phone: +971 55 158 0726
• Address: Dubai, United Arab Emirates