At BookStayTrip Inc., protecting the privacy, confidentiality, and integrity of your personal information is central to our operational principles. This Privacy Policy details our practices concerning the collection, storage, processing, transfer, and safeguarding of personal data across all BookStayTrip websites, mobile applications, and booking services in strict accordance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and applicable global privacy statutes.

1. Information We Collect

We collect information that you directly provide to us, as well as data automatically gathered during your interaction with our services:

• Identity & Contact Data: Full legal name, date of birth, passport/national ID details (where required for travel verification), email address, telephone number, residential address.
• Booking & Travel Data: Reservation itinerary, travel dates, destination preferences, hotel check-in details, passenger names, room preferences, dietary or mobility requirements.
• Financial & Transaction Data: Encrypted payment tokens, billing address, transaction history, invoice records, and payout banking details for hosts. Full credit card numbers are handled exclusively by PCI-DSS certified payment processors.
• Technical & Device Data: IP address, browser type, operating system version, device identifiers, referral URLs, language preference, and cookie identifiers.

2. How We Use Your Personal Data

We process your data under legitimate legal bases to: facilitate and confirm reservations with lodging, tour, and rental providers; issue travel vouchers and invoices; provide 24/7 customer support; safeguard against fraudulent transactions; comply with mandatory tax and regulatory reporting; and deliver personalized travel recommendations.

3. Legal Bases for Processing (GDPR Article 6)

We process your information based on: (a) Performance of a Contract (processing your bookings and payments); (b) Legitimate Interests (fraud prevention, platform security, customer service optimization); (c) Legal Compliance (tax, accounting, and anti-money laundering mandates); and (d) Consent (marketing communications and non-essential cookies, which you can withdraw at any time).

4. Sharing & Disclosure of Personal Data

We do not sell your personal data. We disclose personal data strictly to: (a) Travel Providers (hotels, tour hosts, fleet operators) to fulfill your confirmed reservations; (b) Certified Service Providers (cloud hosting, payment gateways, customer communication systems); and (c) Law Enforcement and Regulatory Authorities when legally compelled by valid court orders or statutory subpoenas.

5. International Data Transfers & Safeguards

Because travel is inherently international, your data may be transferred to and processed in countries outside your country of residence. Where transfers occur, we implement European Commission Standard Contractual Clauses (SCCs), robust encryption in transit and at rest (AES-256), and rigorous data processing agreements.

6. Data Retention Schedule

We retain booking and customer data for the duration of your active account and up to 7 years following transaction completion to satisfy legal, tax, accounting, and audit compliance requirements. Marketing preferences are maintained until you opt out.

7. Your Statutory Rights

Under international privacy laws, you possess the right to: access your personal data; rectify inaccurate or incomplete records; request permanent erasure of your data ("Right to be Forgotten"); restrict or object to certain processing; and request data portability. To exercise any of these rights, contact our Data Protection Officer at vashishttechnologies@gmail.com.

8. Privacy Office Contact