Privacy Policy

1. Information we collect

Depending on how you use the website, we collect:

• Account details: your name and email address when you create a membership account, and your phone number, country, and city if you add them to your profile.
• Booking details: guest name(s), email, phone number, stay dates, room and add-on selections, and any special requests you submit with a reservation.
• Payment information: payments are processed by our payment partner Xendit. We never receive or store your card number, e-wallet credentials, or banking details; we receive only the payment status and a payment reference.
• Inquiries and applications: information you submit through the partnership inquiry form or a job application.
• Technical data: cookies and analytics data such as pages visited, device type, and approximate location, collected subject to your cookie consent choices.

2. How we use your data

We use personal data to process and confirm reservations, send booking and payment emails (including one-time login codes), provide membership benefits, respond to partnership and career inquiries, improve the website, and, only with your consent, measure marketing performance.

3. Sign in with Google

If you choose to sign in with Google, we receive your name and email address from your Google account to create or access your membership account. We do not receive your Google password or any other Google data.

4. Cookies and analytics

We use Google Analytics (via Google Tag Manager) to understand how the website is used. Analytics and marketing cookies are only set after you accept them in the cookie banner. You can change your choice at any time via "Cookie Settings" in the website footer.

5. Sharing your data

We share personal data only where needed to deliver our services: with the hotel property you book (to fulfil your stay), with service providers acting on our instructions (payment processing, email delivery, analytics, hosting), and where required by law. We never sell personal data.

6. Data retention and security

We keep personal data for as long as your account is active or as needed to meet legal, accounting, and reporting obligations. Data is transmitted over HTTPS and access is restricted to staff who need it to operate the service.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw marketing consent at any time. Contact us using the details below and we will respond within a reasonable time.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above reflects the current version; material changes will be announced on this page.