Privacy & cookies

Last updated: 1 August 2026 · Demo document for a portfolio project. This site stores data only in your own browser and sends nothing to a server.

1. What we collect

• Booking details — name, email, phone, stay dates, room preferences and any requests you send to the hotel.
• Account details — if you join One Rewards: your name, email and a password.
• Payment details — card data is used to guarantee or take payment for a booking. On a real deployment this would be handled by a PCI-compliant payment processor and never stored on our own servers.
• Usage data — pages viewed, searches run, device and browser type, and approximate location from your IP address.

2. Why we use it

To take and manage your booking, to pass the necessary details to the property you are staying at, to run the One Rewards programme, to answer support requests, to prevent fraud, and — where you have opted in — to send you offers you can unsubscribe from in one click.

3. Who we share it with

The property you booked, payment processors, and service providers who host and support the site under contract. We do not sell personal data. We disclose data to authorities only where legally required.

4. Cookies

We use three kinds:

• Essential — keep you signed in and hold your search and basket state. These cannot be switched off.
• Analytics — tell us which pages work and which do not, in aggregate.
• Marketing — measure campaigns and limit repeat ads. Off unless you accept them.

You can clear or block cookies in your browser settings at any time; essential cookies being blocked may break sign-in and booking.

5. How long we keep it

Booking records are kept for seven years to meet tax and accounting rules. Account data is kept while your account is open and for 24 months after it is closed. Analytics data is aggregated after 14 months.

6. Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw consent for marketing. We answer requests within 30 days. You may also complain to your local data protection authority.

7. Contact

Data protection officer, StayFinder Hotels & Resorts, 12 Bellamy Street, Mumbai 400001 — privacy@stayfinder.example.