Data Privacy & Security

Privacy Policy

Effective Date: January 2026  |  Last Updated: August 2026  |  Contact Legal Desk

1 Information Collection & Scope

When you reserve a suite, create an account, or access guest services at KPH Stay (https://kphstay.com), we collect essential personal information required to confirm your booking and ensure guest security. This includes: your full name, email address, contact telephone number, government-issued CNIC / Passport identification (required by local hospitality regulations), and check-in/out schedules.

If you interact with our AI Concierge Assistant, conversation dialogue is logged securely to assist in fulfilling your immediate inquiries and preferences.

2 Data Storage & Cloud Database Security

All guest records, reservation ledgers, and transaction histories are securely stored using Google Cloud Firebase Firestore infrastructure with granular partition rules:

Zero Client Database Writes: All database mutations and sensitive operations execute exclusively through verified serverless functions.

Strict Role-Based Access: Guests can only query reservations belonging to their authenticated Firebase UID.

End-to-End Encryption: Data in transit is secured with HTTPS TLS 1.3 / 256-bit encryption.

3 How We Use Collected Information

Collected guest profiles and booking details are used solely for:

  • Confirming luxury suite reservations and sending digital booking vouchers.
  • Issuing digital boarding passes and Wi-Fi access codes upon verified check-in.
  • Updating loyalty points balances in your guest profile.
  • Processing secure refund requests via our authorized payment provider (PayFast).
  • Communicating critical itinerary alerts and front desk support.

We do not sell, rent, or lease your personal information to third-party advertisers under any circumstances.

4 Cookies & Local Browser Storage

We utilize local storage and cookies strictly to enhance system reliability and user security:

  • Authentication Session: Retains active login state to prevent repetitive sign-ins.
  • AI Concierge Dialogue: Keeps active query memory during your browsing session.
  • Service Worker Cache: Caches core styles for fast page load times across mountain mobile networks.

5 Your Data Rights & Deletion Inquiries

You have the right to request a full copy of your registered personal information or request permanent deletion of your profile history. To submit a data request, please email our privacy officer at info@kphstay.com with your registered account credentials.