Privacy Policy for scopoStay

Effective Date: 1/4/2025
Last Updated: 28/7/2025

1. Introduction

Welcome to scopoStay (“we,” “our,” or “us”). This Privacy Policy explains how Everluxe Holiday Homes (trading as scopoStay) collects, uses, discloses, and safeguards your information when you visit our website www.scopostay.com and use our services.

By accessing or using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

Register for an account
Use our services
Contact us for support

The personal information we collect includes:

Name: Your full name
Email Address: Your email address for account creation and communication
Company Name: Your business or organization name
Payment Information: Credit/debit card details processed through our payment processor

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website, including:

Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance your experience
Usage Data: Information about how you use our website and services
Device Information: Information about your device and browser

3. How We Use Your Information

3.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract (account creation, service delivery, payment processing).

Legitimate Interests: Processing necessary for our legitimate business interests, including customer support, service improvement, and fraud prevention, provided your interests and fundamental rights do not override these interests.

Consent: Where you have given clear consent for us to process your personal data for specific purposes (such as marketing communications, if applicable).

Legal Obligation: Where processing is necessary to comply with legal obligations.

3.2 Primary Uses

Customer Support: To provide customer service and technical support
Account Management: To create and manage your account
Service Delivery: To provide and maintain our SaaS platform
Payment Processing: To process transactions and billing

3.3 Secondary Uses

Communication: To send you important updates about our services
Service Improvement: To analyze usage patterns and improve our platform
Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our website and services:

Stripe: Our payment processor for handling credit/debit card transactions

4.2 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Remember your preferences and settings
Analyze website traffic and usage patterns
Improve our services and user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

7. Data Retention

We retain your personal information for as long as necessary to:

Provide our services to you
Comply with legal obligations
Resolve disputes
Enforce our agreements

Specific Retention Periods:

Account Data: Retained for the duration of your account plus 3 years after account closure for legal and business purposes
Payment Information: Retained for 7 years for accounting and tax purposes (actual payment data is processed and stored by Stripe according to their retention policies)
Support Communications: Retained for 3 years to maintain service quality and resolve ongoing issues
Usage Data and Analytics: Retained for 2 years for service improvement purposes

You can request earlier deletion of your data by exercising your rights as outlined in Section 8.

8. Your Rights and Choices

8.1 General Rights

You have the following rights regarding your personal information:

Access and Update: You can access and update your account information through your account dashboard
Data Deletion: You can request deletion of your personal information by contacting us at [email protected]
Data Modification: You can request modification of your personal information by contacting our support team
Communication Preferences: You can opt out of non-essential communications by following the unsubscribe instructions in our emails

8.2 Your Data Protection Rights under the General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following additional rights under GDPR:

Right to be Informed: You have the right to be informed about the collection and use of your personal data. This privacy policy serves as our primary method of providing this information.

Right of Access: You have the right to request copies of your personal data. You can access most of your data through your account dashboard, or contact us for a complete copy.

Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data under certain circumstances, including:

When the data is no longer necessary for the purposes it was collected
When you withdraw consent and there is no other legal basis for processing
When the data has been unlawfully processed

Right to Restrict Processing: You have the right to request restriction of processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability: You have the right to request transfer of your personal data in a structured, commonly used, and machine-readable format to another organization.

Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or significantly affects you.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights: To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by up to two months for complex requests.

9. International Data Transfers

As we operate globally from the UAE and serve customers worldwide, your information may be transferred to and processed in countries other than your own.

For EU/EEA Residents: When we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

Adequacy Decisions: Transferring to countries with adequate data protection as determined by the European Commission
Standard Contractual Clauses: Using European Commission-approved standard contractual clauses with our service providers
Certification Schemes: Working with providers who participate in recognized certification schemes for data protection

Third-Party Processors: Our payment processor Stripe maintains appropriate data protection standards and certifications for international transfers.

You can request more information about the specific safeguards we use for international transfers by contacting us at [email protected].

10. Children’s Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

Posting the new Privacy Policy on this page
Updating the “Last Updated” date
Sending you an email notification for material changes

12. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where required by law)
Notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms
Take immediate steps to address the breach and minimize any potential harm
Maintain records of any data breaches and our response actions

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Website: www.scopostay.com
Business Name: Everluxe Holiday Homes (trading as scopoStay)
Location: Dubai, UAE

For GDPR-related inquiries: If you are an EU/EEA resident and have concerns about our data processing that we cannot resolve, you have the right to lodge a complaint with your local data protection authority.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates. Any disputes arising under this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Dubai, UAE.

This Privacy Policy is effective as of the date stated above and applies to all information collected by scopoStay.