Resaura Selection Vacation Hoes Rental L.L.C S.O.C website is the data controller of personal data processed through the Site and related digital properties (together, “Resaura Site”).

Scope

This notice applies to personal data processed via Resaura Site in connection with related paid services.

Categories of Personal Data

We process:

• Identification and contact data (e.g., name, unit details, address, email, phone, date of birth, ID numbers where required by law).
• Account, authentication, and profile data (e.g., username, credentials, preferences).
• Transaction and payment data (e.g., payment method token, billing details, invoices; card processing is handled by PCI DSS compliant processors).
• Property/tenancy and services data (e.g., service requests, amenity bookings, access logs where applicable).
• Communications and marketing preferences.
• Technical/usage data (e.g., device identifiers, IP address, OS and site version, diagnostic logs).
• Location data and device features (subject to your permissions).
• In-Site analytics and engagement data via SDKs (see Tracking Technologies Policy).

Purposes and Legal Bases for Processing

We process personal data only where a lawful basis applies:

• Contractual necessity: to create/manage your account, provide requested services, process payments, manage bookings and service requests, deliver customer support, and fulfill contractual obligations relating to your unit.
• Legal obligations: to comply with applicable real estate, tax, accounting, anti-money laundering/know-your-customer, sanctions, consumer protection, health and safety, and cybersecurity laws; to respond to lawful requests by authorities.
• Legitimate interests: to secure Resaura Site and our systems; prevent fraud and misuse; maintain and improve the Resaura Site and services; measure performance; personalize non-marketing features; enforce terms; pursue/defend legal claims. We balance these interests against your rights and reasonable expectations.
• Consent: for optional uses such as push notifications for marketing, targeted advertising/advanced analytics, accessing certain device features not strictly necessary for the service, and sharing data with third parties for their marketing. You can withdraw consent at any time by contacting us.

Where we rely on legitimate interests or consent, we will provide context-specific notices on theSite.

Retention

We retain personal data only for as long as necessary for the purposes collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements, and for the establishment, exercise, or defense of legal claims. By way of example:

• Account data: retained for the life of the account and then deleted or anonymized within a reasonable period, unless required to be kept longer by law.
• Transaction and billing records: retained for the applicable statutory period under UAE law.
• Service request and operational logs: retained for operational necessity and then deleted or anonymized.
• Marketing data: retained until you opt out or withdraw consent, after which we suppress your details from marketing.

We maintain a detailed retention schedule and securely delete or anonymize data when no longer required.

Sharing and Processors

We share personal data with:

• Resaura affiliates for centralized operations consistent with this notice.
• Service providers acting as processors under written contracts, including hosting and cloud infrastructure, CRM platforms, analytics and performance monitoring, customer communications and messaging, push notification services, payment processors, identity verification and fraud prevention, customer support tools, and field service vendors. These providers are bound to process personal data only on our instructions and to maintain appropriate security.
• Professional advisers, auditors, and insurers for legitimate business purposes.
• Authorities, regulators, and law enforcement where required by law.
• Prospective or actual buyers or investors in the context of corporate transactions, subject to appropriate safeguards.

We maintain an up-to-date list of key processors and SDKs within the Site

International Transfers

We may transfer personal data outside the UAE. Where we do, we implement appropriate transfer mechanisms and safeguards in line with applicable law to ensure an adequate level of protection. Details are available on request.

Marketing and Your Choices

We send direct marketing (including push notifications or email) only with your explicit opt-in consent. You can manage your preferences or withdraw consent at any time via:

Email: [insert]

Your Rights Under Applicable Law

Subject to legal limitations, you may have the right to:

• Access your personal data and obtain information about our processing.
• Rectify inaccurate or incomplete data.
• Erase personal data (right to be forgotten).
• Restrict processing.
• Object to processing based on legitimate interests and to object at any time to direct marketing.
• Withdraw consent where processing is based on consent.
• Data portability (receive your data in a commonly used format and transmit it to another controller where technically feasible).
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless lawful safeguards apply. We do not engage in such decision-making for Resaura Site.

To exercise your rights:

Email: [insert]. We may request information to verify your identity and will respond within the timelines required by applicable law.

Security

We employ administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Despite these measures, no system is completely secure. You are responsible for maintaining the confidentiality of your credentials and securing your device.

Personal Data Breach

If a breach of personal data occurs that is likely to pose a risk to your privacy or confidentiality, we will notify the competent authority and affected individuals where required by law and take reasonable steps to mitigate harm.

Children’s Privacy

Resaura Site is not directed to minors as defined by applicable law, and we do not knowingly collect personal data from minors without appropriate consent. If you believe we have collected personal data from a minor, contact us at [insert] so we can delete it.

Changes to This Notice

We may update this notice. We will post changes in the Site and update the “Last modified” date. Where required by law, we will seek your consent to material changes.

Contact

Questions or requests regarding this notice: [insert]