1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with you. This data is categorized as follows:

• Personal Identifiers: This includes your full name, email address, and physical address provided during booking or account creation.
• Technical and Usage Data: When you interact with our platform, we automatically collect your IP address, browser type, operating system, and details about your navigation patterns through cookies and similar tracking technologies.
• Commercial Information: We maintain records of the services you have purchased, reservation histories, and preferences related to your leisure activities.
• Communication Records: Any information you provide when contacting our support team or participating in surveys and feedback forms.

2. Purposes of Data Processing

Roomvira processes your information to deliver a seamless and personalized experience. The primary objectives include:

• Service Fulfillment: Managing your reservations, processing payments, and providing the premium hospitality services you request.
• Personalization: Tailoring our recommendations and offers to match your specific interests in leisure and travel.
• Security and Integrity: Monitoring for fraudulent activity and protecting our platform from security vulnerabilities and unauthorized access attempts.
• Legal Compliance: Adhering to statutory requirements, responding to legal requests, and enforcing our terms of service.
• Communication: Sending administrative updates, security alerts, and marketing materials (only where you have provided explicit consent).

3. Legal Foundations for Processing

We process your personal data based on the following legal frameworks:

• Consent: When you have given us clear permission to process your data for a specific purpose, such as receiving our newsletter.
• Contractual Necessity: When the processing is required to fulfill our obligations under a contract with you, such as completing a booking.
• Legitimate Interests: When the processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
• Legal Obligations: When we are required by law to maintain records or disclose information to authorities.

4. Data Retention and Disposal

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this policy. The specific duration depends on the nature of the data and the legal requirements involved. For instance, transaction records are kept for a minimum period to satisfy tax and accounting regulations. Once the retention period expires or the data is no longer needed, we employ secure deletion methods or anonymize the information so it can no longer be associated with you.

5. Disclosure to Third Parties

Roomvira does not sell your personal information. We may share data with trusted third parties under the following circumstances:

• Service Providers: We engage reputable vendors to assist with payment processing, data analysis, email delivery, and hosting services. These partners are contractually obligated to protect your data.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transition, subject to the same privacy protections.

6. Information Security Measures

We implement a robust suite of administrative, technical, and physical safeguards designed to protect your personal data. This includes the use of industry-standard encryption for data in transit and at rest, firewalls, and strict access controls. While we strive to ensure the highest level of protection, no method of transmission over the internet is entirely secure. We continuously monitor our systems for potential threats and vulnerabilities to maintain a safe environment for our users.

7. Your Legal Rights

Under US privacy laws, you possess specific rights regarding your personal information. These include:

• Right to Access: You may request a copy of the personal data we hold about you and information on how it is being used.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete information.
• Right to Deletion: You may request that we erase your personal data, subject to certain legal exceptions.
• Right to Opt-Out: You have the right to direct us not to process your data for targeted advertising or to opt-out of marketing communications at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

8. Cookies and Tracking

Our website uses cookies to enhance functionality and analyze traffic. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impact the performance and features of our platform. We do not currently respond to "Do Not Track" signals, as there is no uniform industry standard for their implementation.

9. How to Opt-Out

You have the right to opt-out of certain data processing activities at any time. To exercise this right, you may use the following methods:

• Cookie Preferences: You can adjust or withdraw your cookie consent at any time by clicking the "Customize" button in the cookie preferences banner located at the bottom of any page. You may also clear your saved preferences by removing the "cookieConsentRuntime" entry from your browser's local storage.
• Marketing Communications: To unsubscribe from promotional emails, click the "unsubscribe" link included at the bottom of any marketing email you receive from us.
• Browser-Level Controls: Most modern browsers allow you to block or delete cookies through their privacy settings. You can also use private or incognito browsing modes to limit tracking.
• Do Not Track: While we do not currently respond to "Do Not Track" signals, you may enable this feature in your browser as an additional layer of privacy protection.
• Contact Us Directly: You may email us at [email protected] with the subject line "Opt-Out Request" and we will process your request within 30 days.

Opt-Out and Your Choices

You have the right to control how your personal information is collected and used. Depending on your location and applicable laws, you may exercise the following opt-out choices:

• Data Sharing and Sale: You may opt out of the sale or sharing of your personal information with third parties, where applicable under laws such as the CCPA/CPRA in California or similar legislation in other jurisdictions. While we do not sell personal information in the traditional sense, some data may be shared with trusted partners to provide or improve our services.
• Cookies and Tracking: You can manage or refuse cookies and tracking technologies through your browser settings or by using the cookie consent tools provided on our website.
• Marketing Communications: You can opt out of receiving promotional emails or newsletters by following the unsubscribe link in any communication or by contacting us directly.
• Withdrawal of Consent: If you have previously provided consent to data processing, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights or make an opt-out request, please contact us at [email protected] or via our contact form.

10. Contact Information

If you have any questions, concerns, or wish to exercise your rights as described in this policy, please reach out to our privacy team using the details below: