Privacy Policy

Daniels Luxury Holiday Home Rentals LLC

Last Updated: February 12, 2026

1. Introduction

Daniels Luxury Holiday Home Rentals LLC (Trade License No. 943423), operating under the brand name Daniels Holiday Homes (“we,” “us,” or “our”), is committed to protecting the privacy and personal data of our website visitors, registered users, and guests. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with our website at www.danielsholidayhomes.com (the “Website”), our booking platform, and our property management services.

Our operations are conducted in full compliance with the laws and regulations of the United Arab Emirates, including but not limited to the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE Data Protection Law”), and the regulatory requirements of the Dubai Department of Tourism and Commerce Marketing (“DTCM”). Where applicable, we also align our practices with the General Data Protection Regulation (“GDPR”) to serve our international users, particularly those based in the European Economic Area (“EEA”).

By accessing or using our Website, creating an account, or engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

2. Data Controller

The data controller responsible for processing your personal data is:

Daniels Luxury Holiday Home Rentals LLC

Trade License Number: 943423

Registered Address: No 59, Goshi Warehouses, Al Quoz Industrial 3, Al Quoz, Dubai, United Arab Emirates

Privacy Contact: marketing@danielsholidayhomes.com

3. Information We Collect

3.1 Information You Provide Directly

When you interact with our Website and services, you may provide us with the following categories of personal information:

Account Registration: When you create a registered account on our booking platform, we collect your name, email address, and contact number. Account creation is facilitated through Supabase, our authentication and user management provider.

Booking Inquiries: When you submit an inquiry through our Website, we collect your name, email address, contact number, and any details you include in your message regarding your accommodation requirements.

Booking Reservations: When you place a booking through your registered account, we collect your name, email address, and contact number as provided during the booking process.

Direct Communications: Identification data required for booking confirmation, including but not limited to passport copies, visa details, and government-issued identification, are obtained exclusively through direct communication channels (email, phone, or messaging) and are not collected through the Website. This approach reduces the exposure of sensitive identification documents by keeping them outside of the Website’s data collection systems. For details on how we handle identification data, please refer to Section 4 of this Privacy Policy.

Reviews and Testimonials: If you submit a review, testimonial, or feedback about our services, we may collect your name (or initials), country of origin, and approximate stay dates. For further details, please refer to Section 5.7 of this Privacy Policy.

3.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies and similar tracking technologies. For a comprehensive overview of these technologies, please refer to Section 7 of this Privacy Policy and our separate Cookie Policy.

Analytics Data: We use Google Analytics and Microsoft Clarity to collect usage data including pages visited, session duration, device type, browser information, approximate geographic location, and interaction patterns such as scrolls, clicks, and navigation behavior.

IP Address Handling: Google Analytics may process your IP address as part of the data collection process. Where available, we utilize IP anonymization features to truncate IP addresses before storage. However, some temporary processing of full IP addresses may occur during data transmission to Google’s servers before anonymization is applied.

Session Replay and Interaction Recording: Microsoft Clarity may record anonymized replays of user sessions, capturing mouse movements, clicks, scrolls, and page interactions. We configure Clarity to mask sensitive input fields, and session recordings do not capture passwords, payment card details, or other sensitive data entered into form fields. Users can opt out of session recording via the cookie consent settings described in Section 7.

Advertising Data: Google Ads Conversion Tracking collects data related to interactions with our advertising campaigns, including conversions and actions taken after clicking on our advertisements.

Technical Data: Our hosting provider, Vercel, automatically collects server logs which may include IP addresses, request timestamps, and browser user-agent strings.

3.3 Information We Do Not Collect Through the Website

We do not collect payment card details, passport numbers, visa information, Emirates ID numbers, or any other government-issued identification documents through the Website. Such information, when required for booking completion, is obtained solely through direct communication channels outside of the Website.

3.4 Sources of Data

In addition to information collected directly from you, we may receive personal data from the following sources:

OTA and Booking Platforms: If you make a booking through a third-party online travel agency (such as Airbnb, Booking.com, Vrbo, or Expedia) or a channel manager, we receive booking details including your name, contact information, booking dates, and accommodation preferences as transmitted by the platform.

Referral Partners and Agents: If you are referred to us by a travel agent, relocation agent, corporate travel partner, or other referral source, we may receive your name, contact details, and accommodation requirements from that source.

Payment Processors: Stripe and Network International provide us with transaction confirmation data, including payment status and transaction identifiers. We do not receive your full card details from these processors.

Regardless of the source, all personal data received is processed in accordance with this Privacy Policy.

4. Sensitive Data and Data Minimization

We are committed to the principle of data minimization and collect only the personal data that is necessary for the specific purposes described in this Privacy Policy.

4.1 Identification Documents

Passport copies, visa copies, and government-issued identification documents are classified as sensitive data and are subject to enhanced handling procedures. We collect identification documents solely for the purpose of guest verification and compliance with DTCM regulations and UAE law. Identification documents are never collected through the Website; they are obtained exclusively through direct communication channels.

Identification documents are stored in encrypted storage with access restricted to authorized personnel on a strict need-to-know basis. They are not used for marketing purposes, audience building, or any purpose other than guest verification and regulatory compliance. Identification documents are retained for a period of twelve (12) months following checkout and are subsequently securely deleted.

4.2 Accidental Receipt of Sensitive Data

If you inadvertently transmit sensitive personal data to us through an insecure channel (such as an unencrypted email containing financial information or identification documents sent in response to a general inquiry), we reserve the right to delete the data and request resubmission through a more secure method. We will notify you if this occurs and provide instructions for secure resubmission.

4.3 Data Accuracy and User Responsibility

You are responsible for ensuring that the personal information you provide to us is accurate, current, and complete. We are not responsible for delays, failed communications, or service issues arising from incorrect or outdated contact details, email addresses, or phone numbers provided by you. If your personal information changes, please update your account details or contact us at marketing@danielsholidayhomes.com to ensure your records remain accurate.

5. How We Use Your Information

We process your personal data for the following purposes:

5.1 Service Delivery

To process your booking inquiries, manage reservations, facilitate check-in and check-out procedures, and provide guest support throughout your stay.

5.2 Account Management

To create and maintain your registered account, authenticate your identity, and provide access to booking features and history.

5.3 Marketing Communications

To send you newsletters, promotional offers, seasonal updates, and message broadcasts related to our holiday rental services and available properties. Marketing communications are distinct from transactional communications (such as booking confirmations, check-in instructions, and payment receipts), which are necessary for service delivery and cannot be opted out of.

Marketing communications may be delivered via email, SMS, or WhatsApp. You may opt out of marketing communications at any time by: following the unsubscribe link included in each marketing email; replying STOP to any marketing SMS or WhatsApp message; or contacting us at marketing@danielsholidayhomes.com with the subject line “Unsubscribe.” Opting out of marketing communications does not affect transactional communications related to active or upcoming bookings.

Marketing communications may include the following categories: promotional offers and seasonal deals, property highlights and new listings, post-stay feedback requests, abandoned inquiry follow-ups, and general newsletters about our services and the Dubai holiday rental market.

5.4 Remarketing and Advertising

To build remarketing audiences through Google Ads for the purpose of serving relevant advertisements to users who have previously interacted with our Website. This involves sharing limited, anonymized or pseudonymized data with Google in accordance with Google’s advertising policies. For further details on automated profiling, please refer to Section 5.8.

5.5 Website Improvement

To analyze user behavior and interaction patterns through analytics and session replay tools, enabling us to improve website functionality, content, and user experience. Session analytics data is collected in anonymized or aggregated form where possible.

5.6 Legal Compliance

To comply with applicable laws, regulations, and legal processes, including requirements set by DTCM and UAE authorities. This includes retaining booking records and guest information for regulatory audit and compliance purposes.

5.7 User-Generated Content, Reviews, and Testimonials

If you submit a review, testimonial, or feedback about your experience with Daniels Holiday Homes, we may display your first name or initials, country of origin, and approximate stay period (month and year) alongside your review on our Website or in marketing materials. We reserve the right to moderate, edit for clarity, or remove user-generated content that violates our Terms of Service or applicable law.

Reviews and testimonials posted on third-party platforms (such as Google, TripAdvisor, Airbnb, or Booking.com) are governed by the respective platform’s privacy policies, and we do not control how those platforms process your data. If you wish to request the removal of a testimonial displayed on our Website, please contact us at marketing@danielsholidayhomes.com.

5.8 Automated Decision-Making and Profiling

We use advertising platforms (including Google Ads) to create audience segments and serve advertisements based on users’ interactions with our Website. This may involve automated profiling of user behavior, such as pages viewed, time spent on the Website, and conversion actions, to determine which advertisements are most relevant.

No decisions that produce legal effects or similarly significant effects concerning you are made solely by automated means. Automated profiling is used exclusively for advertising optimization and does not affect your ability to make bookings, the pricing offered to you, or your rights under these Terms. You can opt out of advertising-related profiling by adjusting your cookie preferences via our cookie consent banner or by using the advertising opt-out tools provided by Google (available at ads.google.com/settings).

6. Legal Basis for Processing

We process your personal data on the following legal grounds:

Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party, including booking reservations and service delivery.

Consent: Where you have provided explicit consent, such as subscribing to marketing communications or accepting cookies for analytics and advertising purposes.

Legitimate Interests: Processing is necessary for our legitimate business interests, including website security, fraud prevention, service improvement, and remarketing, provided these interests do not override your fundamental rights and freedoms.

Legal Obligation: Processing is necessary to comply with our legal obligations under UAE law, DTCM regulations, and applicable tax and commercial law requirements.

7. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to provide essential functionality, analyze usage, and support advertising. This section provides an overview; for a detailed audit of all cookies used on the Website, including their names, providers, purposes, and durations, please refer to our separate Cookie Policy.

7.1 Cookie Categories

We use the following categories of cookies:

Strictly Necessary Cookies: These cookies are essential for the Website to function, including user authentication (Supabase) and cookie consent management. These cannot be disabled without affecting core functionality.

Analytics and Performance Cookies: These cookies (Google Analytics, Microsoft Clarity) collect anonymized data about how visitors use the Website, helping us improve functionality and content.

Advertising and Remarketing Cookies: These cookies (Google Ads, Google DoubleClick) track advertising campaign effectiveness and enable remarketing to users who have previously visited the Website.

Tag Management Cookies: These cookies (Google Tag Manager) manage the deployment of tracking scripts on the Website.

7.2 Cookie Consent

When you first visit the Website, you will be presented with a cookie consent banner allowing you to accept all cookies, accept only strictly necessary cookies, or customize your preferences by category. If you reject non-essential cookies, the Website will continue to function normally; however, analytics data will not be collected, session recordings will not be generated, and remarketing audiences will not be built from your visit.

You can change your cookie preferences at any time by accessing the cookie settings link in the Website footer.

7.3 Do-Not-Track Signals

Some browsers transmit a “Do-Not-Track” (DNT) signal. There is currently no universally accepted standard for how websites should respond to DNT signals. Our Website does not currently respond to DNT signals. However, you can control tracking through our cookie consent banner as described above.

8. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. All user data is handled internally within our organization. However, we engage the following categories of service providers who process data on our behalf and under our instruction:

Hosting and Infrastructure: Vercel (United States, US-East-1 region) provides website hosting services.

Authentication and User Management: Supabase (Asia-Pacific, AP-Southeast-2 region) provides authentication services and manages user account data.

Email Delivery: Resend handles the delivery of transactional and marketing email communications.

Analytics: Google Analytics and Microsoft Clarity receive anonymized usage data for website analytics and user experience research.

Advertising: Google Ads receives limited data for conversion tracking and remarketing audience building. This is the only instance in which user data is shared with a third party for purposes beyond direct service provision.

Payment Processing: Stripe processes online payments, and Network International processes offline payments. These processors handle payment data in accordance with their own privacy policies and PCI DSS standards. We do not store full payment card details on our servers.

All third-party service providers are contractually bound to process your data only as instructed by us and to implement appropriate security measures.

9. Law Enforcement and Government Disclosure

We may disclose your personal data to competent law enforcement agencies, courts, regulators, or government authorities where we are legally required or compelled to do so by applicable law, court order, subpoena, or regulatory directive. This includes, but is not limited to, disclosure to UAE police, immigration authorities, DTCM, and other regulatory bodies.

In certain circumstances, we may be legally prohibited from notifying you that your data has been disclosed to a government authority. Where we are not prohibited from doing so, we will make reasonable efforts to notify you of such disclosures.

We may also disclose personal data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Daniels Holiday Homes, our guests, our staff, or the public, or to prevent or investigate suspected fraud, illegal activity, or violations of our Terms of Service.

10. Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, bankruptcy, insolvency, or similar business transaction or proceeding involving Daniels Luxury Holiday Home Rentals LLC, your personal data may be transferred to the acquiring entity, successor organization, or appointed administrator as part of that transaction or proceeding. Any such transfer will be subject to appropriate confidentiality obligations and conducted in accordance with applicable data protection laws. Where possible, we will notify you in advance of any such transfer and the applicable terms.

11. International Data Transfers

As our service providers operate in various jurisdictions, your personal data may be transferred to and processed in countries outside the United Arab Emirates, specifically:

United States (US-East-1): Website hosting through Vercel, analytics through Google, and advertising services through Google Ads.

Asia-Pacific (AP-Southeast-2): User authentication and account management through Supabase.

These transfers are conducted in compliance with applicable data protection laws. Where data is transferred to jurisdictions that may not provide the same level of data protection as the UAE, we ensure appropriate safeguards are in place, including contractual obligations with our service providers. For users within the EEA, transfers are conducted in accordance with GDPR requirements, including the use of Standard Contractual Clauses where applicable.

12. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are as follows:

Account Data: Retained for the duration of your active account and for a period of twenty-four (24) months following account closure or last activity, unless earlier deletion is requested.

Booking Records: Retained for a period of thirty-six (36) months following the completion of your stay, in accordance with DTCM record-keeping requirements and UAE commercial law obligations. Categories retained for regulatory compliance include guest names, contact details, stay dates, property assignment, and identification document references where mandated.

Inquiry Data: Retained for a period of twelve (12) months from the date of submission, after which it is anonymized or deleted.

Marketing Data: Retained until you withdraw your consent or unsubscribe from marketing communications, after which your data is removed from active marketing lists within thirty (30) days.

Analytics Data: Anonymized analytics data is retained in accordance with the respective analytics provider’s retention policies. Google Analytics data is retained for fourteen (14) months.

Identification Documents: Copies of passports, visas, and identification documents obtained through direct communication for booking verification are retained for a period of twelve (12) months following checkout and are subsequently securely deleted. This retention period is mandated by DTCM regulatory requirements for holiday home operators.

Payment Records: Transaction records are retained for the period required by UAE commercial and tax law.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

13. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data. The availability and scope of these rights may vary under UAE law and EEA law, and we will apply the rights applicable to your jurisdiction.

13.1 Rights Available to All Users

Right of Access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of the personal data we hold about you.

Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure: You have the right to request deletion of your personal data, subject to our legal obligations and legitimate retention requirements. To request account deletion, please email us at marketing@danielsholidayhomes.com with the subject line “Account Deletion Request” and include the email address associated with your account.

Right to Opt Out of Marketing: You have the explicit right to opt out of all marketing communications at any time, as described in Section 5.3, without affecting your ability to use our services or the processing of your booking-related data.

Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

13.2 Additional Rights for EEA Users

If you are based in the European Economic Area, you additionally have the following rights under GDPR:

Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

If you are based in the EEA and believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

13.3 Exercising Your Rights

To exercise any of your rights, please contact us at marketing@danielsholidayhomes.com. We will respond to your request within thirty (30) days. For complex requests or requests requiring extensive data retrieval, we may extend this period by an additional thirty (30) days, in which case we will notify you of the extension and the reasons for it within the initial thirty-day period.

We may request verification of your identity before processing your request to protect against unauthorized access to your data. Identity verification may include matching your request against the email address and phone number associated with your account, requesting your booking reference number, or, for sensitive requests, requesting a redacted copy of government-issued identification (with sensitive fields such as document number partially obscured). We will never request your full payment card details as part of the identity verification process.

If you are submitting a request on behalf of another individual as an authorized agent, we require written authorization from the data subject (signed letter or email from the account holder granting permission), along with verification of both the agent’s identity and the data subject’s identity. Unauthorized requests will be declined.

14. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Secure authentication protocols through Supabase with encrypted credential storage. SSL/TLS encryption for all data transmitted between your browser and our Website. Access controls limiting data access to authorized personnel on a need-to-know basis. Encrypted storage for sensitive documents, including identification documents, with restricted access permissions. Handling of identification documents through direct communication channels rather than website upload forms, reducing the surface area for automated data exposure. Configuration of session analytics tools to mask sensitive input fields and prevent recording of passwords, payment details, and other confidential data. Regular review of security practices and third-party service provider security standards.

While we take all reasonable steps to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data.

15. Data Breach and Security Incident Response

In the event of a personal data breach or security incident that affects your personal data, we will assess the nature, scope, and severity of the incident promptly. Where the breach is likely to result in a risk to your rights and freedoms, we will notify affected individuals without undue delay and provide information about the nature of the breach, the categories of data affected, and the measures being taken to address and mitigate the incident.

Where legally required, we will also notify the relevant regulatory authorities in accordance with applicable data protection laws and within the timeframes mandated by those laws.

If you become aware of a potential security incident affecting your account or our services, please report it immediately to marketing@danielsholidayhomes.com with the subject line “Security Concern.”

16. Children’s Privacy

Our Website and services are intended for individuals aged eighteen (18) years and older. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and become aware that a minor has provided us with personal data, please contact us at marketing@danielsholidayhomes.com and we will take steps to delete such data from our systems.

17. Third-Party Links

Our Website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. Where changes are material, we will make reasonable efforts to notify you, including by email where appropriate. Your continued use of the Website following the posting of changes constitutes your acceptance of such changes.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

Daniels Luxury Holiday Home Rentals LLC

Trade License Number: 943423

No 59, Goshi Warehouses, Al Quoz Industrial 3, Al Quoz, Dubai, United Arab Emirates

Email: marketing@danielsholidayhomes.com

Website: www.danielsholidayhomes.com