Last updated: April 2026 · Governed by the laws of the United Arab Emirates
Stay71 is committed to protecting your privacy. This Policy explains how we collect, use, store, and protect your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable international standards.
Stay71 is operated by Al Wafaa Group / Daidu.ai, based in the United Arab Emirates. We operate the platform at www.stay71.com. For all privacy-related matters, you may contact our Data Controller at: privacy@stay71.com
2.1 Information you provide directly: — Full name, email address, phone number (WhatsApp) — Nationality and identification details (for booking purposes) — Payment information (processed securely via Stripe — we do not store card details) — Profile information including preferences and booking history — Hotel listing information provided by Hotel Partners 2.2 Information collected automatically: — IP address, browser type, device type — Pages visited, time spent, referral sources — Cookies and similar tracking technologies (see Section 8) 2.3 Information from third parties: — Payment confirmation data from Stripe — Communication data from WhatsApp (360dialog) and email (Resend)
We use your personal data for the following purposes: — To create and manage your account — To process and confirm bookings — To send booking confirmations, receipts, and updates — To facilitate communication between Tenants and Hotel Partners — To process payments and issue refunds — To improve our platform and services — To send marketing communications (only with your consent) — To comply with legal obligations under UAE law — To detect, prevent, and respond to fraud or misuse of the platform We do not sell, rent, or trade your personal data to third parties for marketing purposes.
Under UAE PDPL, we process your data on the following legal bases: — Contractual necessity: to fulfil your booking or service request — Legal obligation: to comply with UAE laws and regulations — Legitimate interests: to improve our platform and prevent fraud — Consent: for marketing communications and optional data processing You may withdraw consent at any time by contacting privacy@stay71.com
We share your data only as necessary: 5.1 With Hotel Partners: We share your name, contact details, and booking information with the Hotel Partner to facilitate your stay. Hotel Partners are required to handle this data in accordance with applicable UAE privacy laws. 5.2 With service providers: We use trusted third-party providers including Stripe (payments), Resend (email), 360dialog (WhatsApp), Supabase (database), and Vercel (hosting). These providers are bound by data processing agreements and may only use your data to provide their services to us. 5.3 Legal requirements: We may disclose your data if required by UAE law, court order, or government authority. 5.4 Business transfers: In the event of a merger or acquisition, your data may be transferred to the acquiring entity, subject to the same privacy protections.
We retain your personal data for as long as necessary to provide our services and comply with legal obligations: — Account data: retained while your account is active and for 3 years after closure — Booking records: retained for 5 years in accordance with UAE commercial record-keeping requirements — Payment records: retained for 5 years as required by UAE financial regulations — Marketing data: retained until you withdraw consent You may request deletion of your data at any time, subject to our legal obligations to retain certain records.
Under UAE PDPL and applicable regulations, you have the following rights: — Right to access your personal data — Right to correct inaccurate data — Right to request deletion of your data (subject to legal obligations) — Right to restrict or object to processing — Right to data portability — Right to withdraw consent at any time To exercise any of these rights, please contact us at privacy@stay71.com. We will respond within 30 days.
Stay71 uses cookies and similar technologies to: — Maintain your login session — Remember your preferences — Analyse platform usage and performance — Improve user experience You may disable cookies through your browser settings. Note that disabling cookies may affect the functionality of the platform.
We implement industry-standard security measures to protect your data, including: — SSL/TLS encryption for all data in transit — Encrypted storage via Supabase (hosted in Frankfurt, EU) — Access controls and role-based permissions — Regular security reviews However, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@stay71.com
Your data may be processed outside the UAE by our service providers (including Supabase in the EU and Vercel in the US). We ensure that any international transfers are subject to appropriate safeguards consistent with UAE PDPL requirements.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. Your continued use of Stay71 after any changes constitutes acceptance of the updated Policy.
For privacy-related queries or to exercise your rights: Email: privacy@stay71.com WhatsApp: +971 50 631 9579 Website: www.stay71.com