Privacy Policy

MyApartmentBooking (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our platform at myapartmentbooking.com.

By using our platform, you consent to the practices described in this Policy.

We collect the following categories of personal data:

• Account information: name, email address, phone number, and password (hashed).
• Profile information: profile photo, host type, and business information for Hosts.
• Identity verification documents: passport, Emirates ID, or trade licence (for Host KYC verification).
• Listing information: property details, photos, pricing, and availability submitted by Hosts.
• Transaction data: booking details, payment records, and commission information.
• Communications: messages exchanged between users on our platform and support correspondence.
• Usage data: pages visited, search queries, and device/browser information collected via cookies and analytics tools.

We use your personal data to:

• Provide, maintain, and improve the platform.
• Process bookings and facilitate payments.
• Verify the identity of Hosts through our KYC process.
• Send transactional emails (booking confirmations, status updates, support replies).
• Detect and prevent fraud, abuse, and other prohibited activities.
• Comply with applicable UAE laws and regulations.
• Send marketing communications (only with your explicit consent).

We process your personal data under the following legal bases:

• Contract: to perform our obligations under our Terms of Service.
• Legal obligation: to comply with UAE law.
• Legitimate interests: to prevent fraud and improve our services.
• Consent: for marketing communications and non-essential cookies.

We share your data only in the following circumstances:

• With other users: limited profile information is visible to the counterparty in a booking or conversation (e.g., Host name visible to Guest).
• Service providers: we use Supabase (database and authentication), Resend (email), and Vercel (hosting). These providers process data on our behalf under strict data processing agreements.
• Legal requirements: we may disclose data to UAE authorities if required by law.
• We do not sell your personal data to third parties.

Documents submitted for Host KYC (passport, Emirates ID, trade licence) are stored securely with restricted access. They are used solely for identity verification purposes and are accessible only to our compliance team and authorised administrators.

Verification documents are retained for the duration required by UAE law and are securely deleted thereafter.

We retain your personal data for as long as your account is active, or as long as necessary to fulfil the purposes outlined in this Policy, or as required by UAE law.

When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., financial records).

We use cookies and similar technologies to maintain your session, remember preferences, and analyse platform usage. You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

Under applicable UAE data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention obligations).
• Object to or restrict certain types of processing.
• Withdraw consent for marketing communications at any time.

To exercise these rights, please email privacy@myapartmentbooking.com. We will respond within 30 days.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and role-based access controls. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Our platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-platform notification. The updated Policy will be effective from the date stated at the top of this page.

For privacy-related enquiries, please contact our Data Protection team at privacy@myapartmentbooking.com.