1. Introduction and Overview
StayliaDXB ('we,' 'us,' 'our,' or 'the Company') is a Dubai-based short-term rental investment and property management company operating within the Emirate of Dubai, United Arab Emirates. We are committed to protecting and respecting the privacy of every individual who interacts with our website, engages with our content, submits their contact details through any lead generation channel, or enters into a property management or investment relationship with us.
This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, who we may share it with, and what rights you have over your information. This Policy applies to all users of our website (stayliadxb.com), all individuals who contact us via WhatsApp, email, telephone, social media platforms (Instagram, YouTube, LinkedIn, X/Twitter, Reddit), or any third-party channel, and all clients and investors who engage our property management or investment advisory services.
By accessing our website, submitting your information, or engaging our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of our platforms and services immediately.
2. Controller Identity and Contact Information
The data controller responsible for your personal information is:
Legal Company Name: Stay Lia Holiday Homes Rental L.L.C
Trading Name: StayliaDXB
Legal Structure: Limited Liability Company (LLC)
Trade License No.: 1191879
Commercial Register No.: 2723402
DCCI Membership No.: 485214
License Authority: Department of Economy and Tourism, Dubai
Licensed Activity: Vacation Homes Rental
Contact Email: contact@stayliadxb.com
Phone / WhatsApp: +971 52 213 8608
Website: stayliadxb.com
For all privacy-related queries, data access requests, or complaints, please contact us at the email address above. We will acknowledge your inquiry within five (5) business days and endeavour to resolve it within thirty (30) calendar days.
3. Personal Data We Collect
We collect personal data through multiple channels and for clearly defined purposes. The categories of data we collect include, but are not limited to:
3.1 Information You Provide Directly
• Full name and preferred name
• Email address
• WhatsApp number and/or telephone number
• Country of residence and nationality
• Investment budget range and portfolio size (where voluntarily disclosed)
• Property address or unit details (for management clients)
• Ownership documentation and title deed information (for property management engagements)
• Bank account or payment details (for property management fee disbursements)
• Identity verification documents (Emirates ID, passport, visa, where legally required)
• Any other information voluntarily shared during consultations, messaging, or correspondence
3.2 Information Collected Automatically
• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on pages, and click-through behaviour
• Referral source (how you found our website)
• Device identifiers and screen resolution
• Cookie data and tracking pixel data (see Section 9)
3.3 Information From Third-Party Platforms
• Lead data submitted via Instagram, YouTube, LinkedIn, X, or Reddit interactions
• Analytics data from Google Analytics, Meta Pixel, or similar tools
• Data from WhatsApp Business API interactions
• Information from Airbnb, Booking.com, or other platforms where guests book properties we manage
4. Legal Basis for Processing
We process your personal data on the following legal bases under applicable UAE data protection law, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ('UAE PDPL') and Dubai International Financial Centre ('DIFC') Data Protection Law 5 of 2020 where applicable:
(a) Consent: Where you have freely given, specific, informed, and unambiguous consent for processing, such as submitting your contact information via a lead form or WhatsApp opt-in.
(b) Contract Performance: Where processing is necessary to fulfil a property management agreement, investment advisory arrangement, or any other contractual obligation between you and StayliaDXB.
(c) Legitimate Interests: Where processing is necessary for our legitimate business interests, including marketing our services to potential investors, managing our online presence, and protecting our legal rights — provided these interests are not overridden by your privacy rights.
(d) Legal Obligation: Where we are required by UAE law, DTCM regulations, DLD requirements, or any other applicable regulatory authority to process or retain your data.
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
5.1 Lead Management and Marketing Communications
• To respond to enquiries submitted via WhatsApp, email, social media, or our website
• To send you information about our property management services and investment insights
• To follow up on consultations and proposals
• To include you in our investor newsletter or content distribution list (with your consent)
• To retarget you with relevant content or advertising through platforms including Meta and Google (with consent)
5.2 Property Management Operations
• To manage short-term, mid-term, and long-term rental operations on behalf of property owners
• To list your property on Airbnb, Booking.com, and other platforms
• To communicate with guests and tenants on your behalf
• To process maintenance requests, cleaning schedules, and operational tasks
• To generate and provide financial performance reports
• To disburse rental income to property owners
5.3 Legal and Regulatory Compliance
• To comply with DTCM holiday home licensing requirements
• To fulfil Dubai Land Department (DLD) registration and reporting obligations
• To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations
• To respond to lawful requests from UAE government authorities
5.4 Service Improvement and Analytics
• To analyse website traffic and user behaviour to improve our platforms
• To test and refine our content strategy and lead generation funnels
• To improve our property management systems and operational processes
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:
Lead and contact data: Three (3) years from last interaction, or until you request deletion.
Property management client data: Seven (7) years from the end of the management agreement, in accordance with UAE commercial record-keeping requirements.
Financial and payment data: Seven (7) years from the date of transaction, as required by UAE commercial law.
Guest and tenant data: Three (3) years from the end of their stay, in compliance with DTCM requirements.
Website analytics data: Twenty-six (26) months, in line with standard analytics tool defaults.
Upon expiry of the applicable retention period, data will be securely deleted or anonymised. Where data cannot be deleted due to ongoing legal obligations, it will be restricted from active processing.
7. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:
7.1 Service Providers
We engage trusted third-party service providers who process data on our behalf under strict data processing agreements, including:
• Property management software providers (including Guesty)
• Dynamic pricing platforms (including PriceLabs)
• Accounting software providers (including Xero)
• Booking and listing platforms (Airbnb, Booking.com, VRBO)
• Email and messaging service providers
• Cloud storage and hosting providers
• Marketing and analytics platforms (Google Analytics, Meta Business Suite)
7.2 Professional Advisors
We may share data with our legal advisors, accountants, auditors, or insurers where necessary to protect our legitimate business interests or comply with legal obligations.
7.3 Regulatory Authorities
We will disclose personal data to DTCM, DLD, UAE police, courts, or other competent authorities where required by law, court order, or in response to a lawful investigation.
7.4 Business Transfers
In the event of a merger, acquisition, asset sale, or restructuring of StayliaDXB, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
8. International Data Transfers
Our primary operations are based in Dubai, UAE. Some of our service providers — including booking platforms, cloud storage providers, and analytics tools — may process data outside the UAE. Where data is transferred internationally, we take steps to ensure adequate protection is in place, including:
• Using service providers who maintain appropriate technical and organisational security measures
• Including data protection clauses in our contracts with third-party processors
• Relying on adequacy decisions or equivalent safeguards where available
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your browsing experience and to collect analytics data. Cookies used on our website include:
Strictly Necessary Cookies: Required for the website to function. These cannot be disabled.
Analytics Cookies: Used to track how visitors interact with our website (e.g., Google Analytics). These are enabled only with your consent.
Marketing Cookies: Used to track conversions and display targeted advertising (e.g., Meta Pixel, Google Ads). These are enabled only with your consent.
You can control cookie settings through your browser preferences at any time. Note that disabling certain cookies may affect the functionality of our website.
10. Your Rights
Subject to applicable UAE law, you have the following rights in relation to your personal data:
• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where there is no legitimate reason for us to continue holding it.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request that we provide your data in a structured, machine-readable format.
• Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at contact@stayliadxb.com. We will respond within thirty (30) calendar days. We may require identity verification before processing your request.
11. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
• Encryption of data in transit and at rest where technically feasible
• Access controls limiting data access to authorised personnel only
• Regular review of our security practices and service provider agreements
• Secure password management and two-factor authentication across platforms
No method of electronic transmission or storage is one hundred percent secure. While we take all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.
12. Children's Privacy
Our services are not directed to, and we do not knowingly collect personal data from, individuals under the age of eighteen (18). If you are a parent or guardian and believe a minor has provided us with personal data, contact us immediately at contact@stayliadxb.com and we will take steps to delete it.
13. Third-Party Links
Our website and content may contain links to third-party websites, platforms, or services (including Airbnb, Booking.com, Instagram, YouTube, LinkedIn, X, and Reddit). We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies before providing any personal data.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you directly. Continued use of our services after any update constitutes acceptance of the revised Policy.
15. Complaints
If you believe we have processed your personal data in a manner inconsistent with this Policy or applicable law, you have the right to lodge a complaint with us directly at contact@stayliadxb.com. You may also contact the relevant data protection authority in your jurisdiction.