Privacy Policy

1. Information We Collect

1.1 Personal Information

When you make a booking, we collect:

• Contact Information: Name, email address, phone number
• Booking Details: Check-in/check-out dates, room type, number of guests
• Special Requests: Dietary preferences, accessibility needs, other preferences
• Payment Information: Processed securely through Stripe (we do not store credit card details)

1.2 Automatic Information

We automatically collect certain information when you visit our website:

• Log Data: IP address, browser type, pages visited, time spent
• Cookies: See our Cookie Policy section below
• Device Information: Device type, operating system, screen resolution

2. How We Use Your Information

We use your personal information for the following purposes:

• Processing Bookings: To confirm your reservation and communicate booking details
• Payment Processing: To securely process your payment through Stripe
• Customer Service: To respond to inquiries and provide support
• Email Notifications: To send booking confirmations and pre-arrival information
• Website Improvement: To analyze usage patterns and improve our services
• Legal Compliance: To comply with applicable laws and regulations

3. Cookie Policy

3.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

3.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., session management, booking form state). These cannot be disabled.
• Analytics Cookies (Google Analytics): Help us understand how visitors interact with our website by collecting and reporting information anonymously. These require your consent.
• Preference Cookies: Remember your language preference and cookie consent choice.

3.3 Managing Cookies

You can control and manage cookies through our cookie consent banner or your browser settings. Note that disabling certain cookies may affect website functionality.

4. Third-Party Services

We use the following third-party services that may collect your data:

4.1 Stripe (Payment Processing)

All payment transactions are processed by Stripe, a PCI-compliant payment processor. We do not store your credit card information on our servers. Stripe's privacy policy can be found at: https://stripe.com/privacy

4.2 Google Analytics

We use Google Analytics to analyze website traffic and user behavior. Google Analytics uses cookies to collect anonymous information. You can opt out by declining cookies in our consent banner. Learn more at: https://policies.google.com/privacy

4.3 Resend (Email Service)

We use Resend to send booking confirmation emails. Your email address and booking details are transmitted to Resend solely for this purpose. Learn more at: https://resend.com/legal/privacy-policy

5. Data Storage and Security

5.1 Data Retention

• Booking Data: Retained for 7 years for accounting and legal purposes
• Email Communications: Retained for the duration of your booking plus 1 year
• Analytics Data: Anonymized and retained by Google Analytics for 26 months

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data transmission
• Secure database storage with access controls
• Regular security audits and updates
• PCI-compliant payment processing through Stripe
• Employee training on data protection

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for marketing purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at: stay@jaramasuites.com

7. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

8. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.

10. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us: