Data Protection
Effective Date: June 25, 2026. A comprehensive breakdown of how Stay Realm collects, encrypts, utilizes, and strictly protects your personal data globally.
Stay Realm Ltd. ("we", "our", or "us") respects your privacy and is fundamentally committed to protecting your personal data. This Privacy Policy strictly dictates how we collect, process, encrypt, and manage the personal information you provide when utilizing our global booking platform, websites, mobile applications, and concierge services (collectively, the "Services").
We design our systems with a "privacy by design" philosophy, ensuring that data collection is limited only to what is absolutely necessary to facilitate seamless travel experiences. By engaging with our Services, you acknowledge that you have read, understood, and agree to the data practices described in this comprehensive policy.
To execute your bookings and provide exceptional service, we collect specific categories of personal data. Directly Provided Data includes your full name, email address, physical billing address, phone number, date of birth, and any specific accommodation preferences or accessibility requirements you volunteer during the booking process.
Financial Information: We collect payment details (credit card numbers, expiration dates, CVV codes) strictly for transaction processing. This data is tokenized immediately upon entry and processed directly by our PCI-DSS compliant financial partners. Stay Realm does not store your raw credit card numbers on our operational servers.
Automated Data: When you navigate our platform, we automatically collect technical telemetry. This includes your IP address, browser type, device identifiers, operating system, and granular behavioral data regarding how you interact with our UI (e.g., properties viewed, search queries executed, time spent on pages).
Your data is utilized exclusively for the operational execution and continuous enhancement of our platform. Primarily, we use your information to fulfill the contractual obligation of processing your reservations, communicating booking confirmations to accommodation providers, and facilitating financial transactions.
Secondarily, we use anonymized, aggregated behavioral data to train our proprietary AI search algorithms, ensuring that the properties surfaced in your future searches are highly relevant to your specific traveler profile. We also use your contact information to send critical transactional alerts, security notices, and, subject to your explicit opt-in consent, highly curated promotional offers.
Stay Realm is not a data broker. We categorically do not sell your personal information to third-party advertisers. We only share your data under strict, operational necessities.
Accommodation Providers: When you book a stay, we must transmit your name, contact details, and specific requests to the host or hotel to secure your reservation. Service Providers: We share heavily encrypted data with authorized cloud hosting platforms, payment gateways, and fraud-prevention agencies acting strictly under our direct contractual instruction. Legal Compliance: We will disclose your information if compelled by a legally binding subpoena, court order, or formal request from a recognized government authority.
We employ military-grade security architectures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your device and our servers is secured via 256-bit TLS (Transport Layer Security) encryption.
Our internal databases are fortified behind enterprise-grade firewalls and subject to strict, role-based access controls. Only authorized Stay Realm personnel with a legitimate business need can access personal data, and their access is continuously logged and audited. We conduct regular penetration testing and vulnerability assessments to preemptively identify and neutralize security threats.
Depending on your geographic jurisdiction, you are guaranteed specific legal rights regarding your personal data under frameworks such as the European General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA).
You possess the unequivocal right to request a complete export of the data we hold on you (Right to Access), request corrections to inaccurate data (Right to Rectification), and request the permanent deletion of your account and associated data (Right to Erasure/"Right to be Forgotten"). You may execute these rights directly through your Account Settings or by contacting our Data Protection Officer.
Because Stay Realm operates a globally distributed infrastructure, your personal data may be transferred to, stored, and processed in data centers located outside of your country of residence (predominantly in the European Union and the United States).
When we transfer data across international borders, we rely on legally recognized transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs), to ensure your data receives an equivalent level of rigorous protection regardless of its physical location.
We retain your personal data only for as long as is strictly necessary to fulfill the purposes outlined in this policy, or as required by binding corporate, tax, or legal regulations. Booking records and financial ledgers are typically retained for a period of seven (7) years to comply with international tax auditing standards. Upon the expiration of the requisite retention period, your data is irreversibly anonymized or securely deleted from our active systems.
If you have profound questions regarding this Privacy Policy, wish to exercise your statutory rights, or need to escalate a data protection concern, our dedicated privacy team is at your disposal.
You may contact our Data Protection Officer directly via email at privacy@stayrealm.com, or by physical mail addressed to:
Stay Realm Ltd.
Attn: Legal & Data Protection
4 Waterloo Rd
Ballsbridge, Dublin
D04 A0X3
Ireland
