Privacy Policy

Personal Information: When you create an account, we collect your name, email address, phone number, and profile photo. If you choose to complete your profile, you may also provide additional information such as your date of birth, gender, and preferred language.

Verification Information: To help maintain a safe community, we may collect identity verification information, including government-issued ID documents, selfies, and address verification documents.

Payment Information: When you make or receive payments, we collect payment card details, bank account information, and billing addresses. This information is securely processed by our payment service providers.

Location Data: With your consent, we may collect your precise or approximate location to provide location-based services, improve search results, and comply with local regulations.

Communications: We store messages you exchange with hosts, guests, and our support team to facilitate bookings and resolve disputes.

Usage Information: We automatically collect information about how you interact with our platform, including pages visited, searches performed, bookings made, and features used.

Providing Services: We use your information to create and manage your account, process bookings and payments, facilitate communication between hosts and guests, and provide customer support.

Personalization: We personalize your experience by showing relevant listings, recommendations, and search results based on your preferences, past searches, and location.

Safety & Security: We use information to verify accounts, detect and prevent fraud, investigate security incidents, and enforce our terms of service and community guidelines.

Legal Compliance: We may use your information to comply with applicable laws, regulations, legal processes, or governmental requests.

Analytics & Improvements: We analyze usage patterns to improve our services, develop new features, fix bugs, and understand how users interact with our platform.

Marketing Communications: With your consent, we may send promotional emails about new features, special offers, and travel inspiration. You can opt out at any time.

With Hosts and Guests: When you make a booking, we share necessary information with hosts, such as your name, profile photo, and check-in details. Similarly, guest information may be shared with you if you are a host.

Service Providers: We share information with third-party vendors who help us operate our platform, including payment processors, cloud hosting providers, customer support tools, and analytics services.

Legal Requirements: We may disclose information when required by law, such as in response to subpoenas, court orders, or other legal processes, or when necessary to protect our rights or the safety of our users.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

Public Information: Information you choose to make public, such as reviews, ratings, and profile information, will be visible to other users and may be indexed by search engines.

Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, account access, and remembering your preferences.

Performance Cookies: We use these cookies to collect information about how you use our website, such as which pages you visit most often. This helps us improve site performance.

Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preference or region.

Advertising Cookies: We may use cookies to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. You can opt out of personalized advertising.

Third-Party Cookies: Some of our pages may contain content from third parties, such as social media widgets, which may set their own cookies.

Managing Cookies: You can manage your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect site functionality.

Encryption: We use industry-standard encryption (TLS/SSL) to protect data transmitted between your device and our servers. Sensitive data stored in our databases is encrypted at rest.

Access Controls: We implement strict access controls to limit who can access your personal information. Only authorized personnel with a legitimate business need can access user data.

Security Monitoring: We continuously monitor our systems for security threats, suspicious activities, and potential vulnerabilities. We conduct regular security audits and penetration testing.

Incident Response: We have established procedures to detect, respond to, and recover from security incidents. In the event of a data breach affecting your information, we will notify you as required by law.

Third-Party Security: We carefully vet our service providers and require them to maintain appropriate security measures to protect your information.

Your Role: You can help protect your account by using a strong, unique password, enabling two-factor authentication, and being cautious about phishing attempts.

Access: You have the right to request access to the personal information we hold about you. We will provide this information in a structured, commonly used format.

Correction: You can update or correct inaccurate personal information through your account settings or by contacting us.

Deletion: You can request deletion of your personal information. We will delete your data unless we need to retain it for legal or legitimate business purposes.

Data Portability: You can request a copy of your personal data in a machine-readable format to transfer to another service.

Opt-Out: You can opt out of marketing communications, personalized advertising, and certain data processing activities at any time.

Withdraw Consent: Where we rely on your consent to process personal information, you can withdraw that consent at any time.

Lodging Complaints: You have the right to lodge a complaint with a supervisory authority if you believe your privacy rights have been violated.

Active Accounts: We retain your personal information for as long as your account is active and as needed to provide you with our services.

After Account Closure: When you close your account, we may retain certain information for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements.

Transaction Records: We retain booking and payment records for the period required by tax and accounting regulations, typically 7 years.

Communications: Messages between hosts and guests are retained for 3 years after the booking to support dispute resolution and safety investigations.

Anonymized Data: We may retain anonymized or aggregated data that can no longer identify you for analytical purposes indefinitely.

Legal Holds: We may retain information longer if required for legal proceedings or investigations.

Global Operations: Villa Showroom operates globally, and your information may be transferred to and processed in countries other than your country of residence.

Data Protection: When we transfer data internationally, we implement appropriate safeguards to protect your information, including Standard Contractual Clauses approved by relevant authorities.

Privacy Shield: For transfers from the European Union to the United States, we comply with applicable data protection requirements.

Local Laws: We comply with local data protection laws where applicable, including GDPR in the European Union, CCPA in California, and similar regulations in other jurisdictions.

Adequacy Decisions: Where possible, we transfer data to countries with adequate data protection laws as determined by relevant authorities.

Age Requirement: Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18.

Parental Consent: If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

Account Restrictions: Users must be at least 18 years old to create an account. We may request age verification if we suspect a user is underage.

Contact Us: If you believe we have collected information from a child under 18, please contact us immediately.

Notification: We may update this Privacy Policy from time to time. We will notify you of any material changes by posting a notice on our website or sending you an email.

Review Period: For significant changes, we will provide advance notice and an opportunity for you to review the updated policy before it takes effect.

Continued Use: Your continued use of our services after a policy update constitutes your acceptance of the changes.

Previous Versions: You can request access to previous versions of our Privacy Policy by contacting us.