ORM Holiday (“ORM”, “we”, “us”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with our website, services, and partners.
1. Who This Policy Applies To
This policy applies to:
- Guests booking accommodations,
- Homeowners who list properties,
- Property Management Companies (PMC),
- Users browsing our website, and
- Partners providing services or supplies.
2. Our Commitments
We process your personal data in accordance with applicable privacy laws, including the GDPR and UK GDPR. Our guiding principles are:
- Lawfulness – Data is processed only with a valid legal basis.
- Fairness & Transparency – You are informed about how we use your data.
- Data Minimization – Only relevant and necessary data is collected.
- Security – We use technical and organizational safeguards to protect your data.
- Rights Protection – We ensure you can exercise your data rights.
- Retention Limits – Data is only stored for as long as necessary.
- Third-Party Protection – Partners handling data must meet our security standards.
- International Transfers – Transfers outside the EU/UK are safeguarded by legal mechanisms.
- Breach Notification – In case of a high-risk data breach, we notify you and regulators promptly.
3. What Data We Collect
Depending on your relationship with us, we may collect:
- Guests: Name, contact details, booking details, payment information, preferences, ID documents (where required).
- Homeowners: Name, contact details, tax and banking information, household composition, property details.
- PMC: Contact details and banking information of representatives.
- Users: Browsing data, contact details, preferences.
- Partners: Professional contact and company details.
We do not actively collect sensitive personal data (e.g., health, religion) unless voluntarily provided with your consent.
4. Cookies & Tracking
Our website uses cookies and third-party trackers for analytics, personalization, and advertising. You can manage consent preferences via our Consent Management Platform.
5. Data Security
We apply industry-standard security measures (firewalls, encryption, access controls) to protect your personal data. Payment details are handled directly by certified payment providers using SSL encryption.
6. International Data Transfers
Your data is primarily stored within the EU/UK. Where transfers outside these regions occur, we use approved safeguards such as Standard Contractual Clauses (SCCs) and the UK transfer addendum to ensure equivalent protection.
7. Your Rights
You have the right to:
- Access, rectify, or delete your personal data,
- Object to or restrict its processing,
- Withdraw consent (for marketing or optional processing),
- Request data portability,
- Define post-mortem instructions (France only),
- File a complaint with a supervisory authority.
To exercise your rights, contact us at: cohost@ormuae.com. We may ask for proof of identity to verify your request.
8. Data Retention
We retain personal data only for the period necessary to fulfill contractual, legal, or business obligations:
- Guest & Homeowner accounts: until deletion or 2 years of inactivity.
- Marketing communications: up to 3 years from last contact.
- Cookies: up to 25 months.
- Tax & accounting records: 6–10 years, depending on jurisdiction.
- Litigation records: for the duration of proceedings.
9. Local Law Specifics
- United States: We do not sell personal data. Additional consumer rights apply under U.S. privacy laws (e.g., right to object, non-discrimination, children’s privacy protections under COPPA).
- United Kingdom: UK GDPR applies. Retention for tax/accounting is 7 years. Complaints can be filed with the Information Commissioner’s Office (ICO).
10. Updates
We may update this Privacy Policy periodically. Updates will be posted on our website with the latest revision date.
11. Contact
For questions or concerns regarding this Privacy Policy, please contact:
ORM Holiday
📧 Email: cohost@ormuae.com