Privacy Policy

Information We Collect

• Account data – name, email, phone, password hash.
• Profile preferences – star ratings, price range, guests.
• Location data – coarse/precise location to find nearby hotels (with your consent).
• Transaction data – bookings, amounts, currency, success/failure. Payments are processed by Stripe; we do not store full card numbers.
• Device & usage – app version, device, OS, IP, events, diagnostics, cookies.

How We Use Information

• Provide and improve the Service, including search, booking, and support.
• Process payments and prevent fraud.
• Personalize results and recommendations.
• Comply with legal obligations and enforce terms.

Legal Bases (EEA/UK)

We process personal data under: (i) performance of a contract (to deliver the Service); (ii) legitimate interests (security, analytics, improvements); (iii) consent (location, marketing); and (iv) legal obligations.

Sharing

• Service providers – Stripe (payments), Amadeus (hotel data), hosting, analytics.
• Legal requirements – when required by law or to protect rights.
• Business transfers – in connection with mergers, acquisitions, or asset sales.

Your Rights

• Access – request copies of your personal data.
• Correction – update inaccurate or incomplete data.
• Deletion – request deletion of your data (subject to legal/contractual obligations).
• Portability – receive your data in a structured format.
• Objection – object to processing based on legitimate interests.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

Data Retention

We retain personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Account data is retained while your account is active and for a reasonable period thereafter.

International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions.

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@roomek.com