Data Privacy

1. Data Privacy Framework

At StayNest Vacation Rentals, data privacy is engineered into every touchpoint of our product design. We adhere to the fundamental principles of data minimization, purpose limitation, transparency, and robust encryption.

2. Compliance with GDPR & CCPA/CPRA

Regardless of your jurisdiction, StayNest affords all users privacy protections consistent with the highest global standards:

• European General Data Protection Regulation (GDPR): We process personal data only when we have a recognized legal basis (e.g., performance of a requested referral, legitimate interests in platform security, or your affirmative consent).
• California Consumer Privacy Act (CCPA) / CPRA: California residents have the explicit right to know what personal information is collected, request deletion, and opt out of any data sharing.

3. Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

4. Your Consumer Rights

You possess the following enforceable data rights:

1. Right to Access: Request a complete copy of all personal records we maintain concerning you.
2. Right to Rectification: Require immediate correction of inaccurate or incomplete contact information.
3. Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your inquiry records and email subscription.
4. Right to Data Portability: Receive your provided data in a structured, machine-readable format.
5. Non-Discrimination: We will never deny service, charge different prices, or provide degraded quality because you exercised your privacy rights.

5. How to Submit a Data Request

To exercise any of the rights listed above, you may submit a formal request through our platform privacy channels or by contacting our team. For user protection and privacy assurance, identity verification is conducted prior to fulfilling any data erasure, modification, or export requests.

6. Security & Transfer Protocols

All data transmitted between your browser and our servers is secured using TLS 1.3 encryption. Internal access is strictly regulated using role-based permissions and multi-factor authentication. International data transfers are executed under Standard Contractual Clauses (SCCs) to ensure uninterrupted privacy protection.