Privacy Policy

DreamStay Hotels, operated by Maryam Trading and Consulting ("we", "us", "our"), is committed to protecting the privacy of our users in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights regarding your information. By using dreamstayhotels.com, you agree to the collection and use of information as described in this policy. If you have any questions about this policy, please contact us at support@dreamstayhotels.com.

We collect the following types of personal information: Account information When you create a DreamStay account, we collect your name, email address, and password (stored as a secure hash — we never store your plain-text password). Booking information When you make a hotel booking, we collect guest names, contact email address, contact phone number, check-in and check-out dates, number of guests, guest residency country, and booking preferences. Payment information We do not store your credit card or banking details. All payment information is processed and stored securely by Stripe, our payment processor. We receive only a transaction reference and the last four digits of your card for display purposes. Technical information We automatically collect IP address, browser type and version, device type, pages visited, time and date of visits, and referring URLs. This information is used to improve our service and troubleshoot technical issues. Communications If you contact us via our contact form or email, we retain the content of your messages and your contact details to respond to your enquiry and improve our support.

We use your personal information for the following purposes: To process and manage hotel bookings — including confirming your reservation with our hotel supplier (RateHawk/ETG), sending booking confirmations, and managing cancellations. To communicate with you — including sending booking confirmations, receipts, support responses, and important service updates related to your bookings. To operate and improve our platform — including diagnosing technical issues, analysing usage patterns, and improving the user experience. To comply with legal obligations — including fraud prevention, financial record-keeping, and responding to lawful requests from authorities. To send marketing communications — only if you have opted in to receive them. You may unsubscribe at any time via the link in any marketing email. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We share your personal information only in the following circumstances: Hotel suppliers — We share guest name, contact details, residency, and stay details with RateHawk (ETG) and ultimately the hotel property to fulfil your booking. This sharing is essential to the service. Payment processing — Your payment information is shared with Stripe, Inc. for the purpose of processing your transaction. Stripe is PCI DSS Level 1 certified. Their privacy policy is available at stripe.com/privacy. Email delivery — We use Resend to deliver transactional emails. Resend processes email addresses and message content to deliver emails on our behalf. Legal compliance — We may disclose your information if required by law, court order, or to protect the rights, property, or safety of DreamStay, our users, or the public. Business transfer — In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the acquiring entity, subject to the same privacy protections. We do not share your information with any other third parties without your explicit consent.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including: Account data — Retained for the duration of your account. If you delete your account, your personal data is removed within 30 days, except where retention is required by law. Booking records — Retained for 7 years following the date of the booking for financial and legal compliance purposes. Payment records — Retained for 7 years for tax and accounting purposes. Card details are never stored by DreamStay. Support communications — Retained for 2 years from the date of the last communication. Technical logs — Retained for 90 days. When your data is no longer required, it is securely deleted or anonymised.

DreamStay uses cookies and similar technologies to operate our platform. Cookies are small text files stored on your device. Essential cookies — Required for the platform to function, including session authentication, security tokens, and shopping cart functionality. These cannot be disabled. Analytics cookies — Used to understand how visitors use our site (e.g. pages visited, time on site). We use this data in aggregate form only. You can control non-essential cookies through your browser settings or via our Cookie Settings page. Note that disabling essential cookies will prevent you from using core features such as logging in and making bookings. For full details see our Cookie Policy at dreamstayhotels.com/cookies.

We take the security of your personal information seriously and implement industry-standard technical and organisational measures including: - HTTPS encryption for all data in transit - Passwords stored using bcrypt hashing (never in plain text) - Payment data handled exclusively by Stripe (PCI DSS Level 1) - Access controls limiting employee access to personal data - Regular security reviews of our platform Despite these measures, no system is completely secure. If you suspect unauthorised access to your account, please contact us immediately at support@dreamstayhotels.com.

Under PIPEDA and applicable Canadian privacy law, you have the following rights: Right of access — You have the right to request a copy of the personal information we hold about you. Right to correction — If any information we hold about you is inaccurate or incomplete, you have the right to request a correction. Right to withdraw consent — Where processing is based on your consent (e.g. marketing emails), you may withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing prior to withdrawal. Right to complain — If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca. To exercise any of these rights, please contact us at support@dreamstayhotels.com with the subject line "Privacy Request". We will respond within 30 days.

DreamStay is a Canadian company and your data is processed primarily in Canada. However, some of our service providers (including Stripe and Resend) may process data in the United States or other jurisdictions. When your data is transferred outside Canada, we ensure appropriate safeguards are in place in accordance with PIPEDA. Our service providers are required to maintain appropriate security and privacy standards. By using DreamStay, you consent to the transfer of your information to service providers in other countries for the purposes described in this policy.

DreamStay is not intended for use by children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at support@dreamstayhotels.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this policy periodically. Your continued use of DreamStay after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: Email: support@dreamstayhotels.com Subject line: Privacy Enquiry Website: dreamstayhotels.com/contact Maryam Trading and Consulting Canada We will respond to all privacy enquiries within 30 days.