Privacy Policy

Privacy Policy

This policy explains what personal data Madely Home collects, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to madelyhome.com and to every booking made through it.

Who is responsible for your data

The controller of your personal data is Madely Home ("Madely Home"), Business Bay, Dubai, United Arab Emirates. For any privacy question, or to exercise the rights described below, write to contact@madelyhome.com.

Information we collect

• Account data — name, email address, phone number, password (stored only as a salted hash) and, where enabled, two-factor authentication settings.
• Booking data — the property, dates, number of guests, price, promotional codes and the messages you exchange about a stay.
• Payment data — handled by Stripe. We receive a payment reference, the amount, the outcome and the last four digits of the card. We never see or store full card numbers.
• Technical data — IP address, browser type, pages viewed and approximate location derived from the IP, used to keep the platform secure and to measure how it is used.

Why we use it, and on what basis

• To perform our contract with you — creating an account, taking payment, confirming and managing your stay, and providing support.
• Legitimate interests — preventing fraud and abuse, securing accounts, and improving the service.
• Legal obligation — accounting, tax and the record-keeping required of licensed holiday-home operators in Dubai.
• Consent — analytics cookies and marketing email. You can withdraw consent at any time without affecting anything done before.

Cookies and analytics

We use two kinds of cookies:

• Strictly necessary — a session cookie that keeps you signed in and protects forms against cross-site request forgery, plus a small record of your cookie choice and your language and theme preference. These are required for the site to work and are not used for tracking.
• Analytics (optional) — Google Analytics 4, used to count visits and understand which pages are useful. These cookies are set only after you press "Accept" on the cookie banner. If you press "Decline", Google Analytics is never loaded. You can change your choice at any time from the "Cookie settings" link in the footer.

Who we share data with

We do not sell personal data. We share only what is necessary, with:

• Stripe Payments Europe, Ltd. — card payments, refunds and fraud prevention (payment processor).
• Hostaway — the channel manager that holds our availability, pricing and reservation records.
• Google LLC — Google Analytics 4, only with your consent.
• Cloudflare, Inc. — content delivery, TLS and protection against attacks.
• Our email provider — booking confirmations, password resets and service notices.
• The host of a property you book — the details needed to prepare and hand over the property.
• Authorities — where the law requires it, including guest registration obligations applicable to licensed holiday homes.

International transfers

Some of these providers process data outside the UAE, including in the European Economic Area and the United States. Where that happens, transfers rely on the providers’ standard contractual clauses and equivalent safeguards.

How long we keep it

• Account data — while your account is open, then up to 12 months.
• Booking and payment records — 5 years, to meet accounting and tax obligations.
• Analytics data — up to 14 months.
• Security and access logs — up to 12 months.

Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Where we rely on consent, you may withdraw it at any time. Write to contact@madelyhome.com and we will reply within 30 days. If you are in the EEA or the UK and believe we have not handled your data properly, you may also complain to your national data protection authority.

Security

The site is served over HTTPS only, passwords are hashed, administrator and host accounts require two-factor authentication, and repeated failed sign-in attempts lock an account temporarily.

Children

Madely Home is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

If we change this policy materially we will say so on this page and update the date shown at the top.