Privacy Policy

Last updated: June 17, 2026

1. Who we are

GlobalStay ("GlobalStay", "we", "us") provides the GlobalStay hotel guest experience platform. For personal data processed through the Service, GlobalStay acts as a data controller for our own account, billing, and product analytics data, and as a data processor on behalf of our hotel customers for guest data they collect through the Service.

2. Data we collect

3. How we use it

4. Legal bases

Where applicable law (such as GDPR or UK GDPR) requires a legal basis, we rely on: performance of a contract, our legitimate interests in operating the Service, your consent (where required, for example for non-essential cookies or marketing), and legal obligations.

5. Sharing

We share personal data with:

We do not sell personal data.

6. International transfers

We are based in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US and other countries where we or our subprocessors operate. Where required, we use safeguards such as Standard Contractual Clauses.

7. Retention

We retain personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Backups are deleted on a rolling schedule. Hotel customers control retention of guest data within their account.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. Residents of the EEA, UK, and certain US states (such as California) have specific rights under their local laws, including the right to complain to a supervisory authority. To exercise these rights, contact us at the address below. We respond within the timeframes required by applicable law (typically within one month under GDPR).

9. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege role design — to protect personal data. No system is perfectly secure, and you use the Service at your own risk.

10. Cookies

We use strictly necessary cookies to keep you signed in and remember preferences, and limited analytics cookies to understand product usage. You can manage cookies through your browser.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email.

13. Contact

Privacy questions or rights requests: privacy@globalstay.app.