1. Who We Are
PalmStays is a licensed Dubai holiday-home operator (licensed by Dubai Economy & Tourism) professionally managing private residences at Fairmont South, Palm Jumeirah. We are the data controller for the information described here. This policy explains how we handle personal information when you enquire, book or stay with us, under UAE Federal Decree-Law No. 45 of 2021 (PDPL). Data questions and requests: hello@palmstays.ae.
2. Information We Collect
- Booking details — name, contact information, stay dates, guest count and payment details.
- Identity documents — passport copies or Emirates IDs for all guests, required under UAE regulations and building security rules, submitted at least 48 hours before arrival.
- Communications — messages and requests sent through booking channels, email or phone.
3. How We Use Your Information
- To register guests with Dubai authorities and building security as required by law.
- To process your booking, payment and access arrangements (building clearance, access cards and digital door key).
- To communicate about your stay and provide guest support.
- To meet legal, tax and licensing obligations, including Tourism Dirham administration.
4. Sharing & Service Providers
We share identity information only with parties required to fulfil your stay and legal obligations — Dubai authorities' registration systems, building security/management, and the booking platform you reserved through. We do not sell personal data.
- Infrastructure & processors: our booking system runs on Cloudflare (hosting, database and encrypted document storage); payments are processed by Ziina on their hosted checkout (we never see or store card numbers); transactional guest email is sent through Cloudflare Email Service; digital door access uses the Keyless/OJI platform.
- Embedded third parties on this site: the map embed (Google Maps) and web fonts (Google Fonts) may set cookies or process your IP/device data under Google's own policy. Booking forms are protected by Cloudflare Turnstile bot verification, which processes device and browser signals under Cloudflare's terms. WhatsApp links are optional — messaging us there is governed by Meta's terms.
- International transfers: several of these providers process data outside the UAE. Transfers occur only to deliver the service you requested and are protected by the providers' contractual safeguards.
5. Retention & Security
- Identity documents (passports/Emirates IDs) are transmitted through the approved registration channel and stored encrypted. They are automatically deleted from our systems 90 days after checkout (or after cancellation), unless a longer period is legally required for licensing or building-security records.
- Booking and payment records are retained for the period required by UAE tax and accounting rules (at least 5 years).
- Messages and enquiries are kept for operational history for up to 24 months.
- Access to records is limited to authorized staff under role-based permissions and two-factor controls; guest portal links are private bearer links — treat them like a password.
- If a personal-data breach creates a risk to you, we will notify you and the UAE Data Office as required by law.
6. Booking Terms Summary
- Check-in from 3:00 PM — show your booking confirmation at the residents' lobby desk to collect your cards; checkout by 11:00 AM.
- Direct bookings: 25% deposit at confirmation; balance 14 days before arrival. Bookings inside 14 days require full cleared payment.
- Cancellation (direct): full refund for cancellations at least 5 days before check-in; cancellations within 5 days receive a partial refund (first night plus 50% of remaining nights retained) — subject to mandatory rights and the channel’s terms. Stays of 28+ nights: full refund at least 30 days before check-in; thereafter the first 30 days are non-refundable, subject to mandatory rights and the confirmed reservation terms.
- Minimum stay 2 nights; maximum 4 registered overnight guests.
- ReConnect ReUnite facility privileges are subject to current membership terms, hours, capacity and third-party operation.
- House rules apply — no smoking, parties or unregistered overnight guests; quiet hours 10:00 PM–8:00 AM.
7. Your Rights
Under UAE PDPL you may request access to, correction of, or deletion of your personal information; restriction of or objection to processing; and data portability where applicable. Some requests may be limited by legal retention duties (registration, tax). To exercise a right, contact us through your booking channel, at hello@palmstays.ae or WhatsApp. You may also complain to the UAE Data Office if you believe your data has been mishandled.
8. Contact
PalmStays — Fairmont South Residence, Palm Jumeirah, Dubai, United Arab Emirates. Questions about this policy can be raised via your booking channel, at hello@palmstays.ae or WhatsApp.
Version 2026-10-19 · This summary does not replace the signed booking agreement or platform terms.