Account & profile data: name, email address, mobile number (stored in international E.164 format), password hash, membership tier, wishlist, booking history, and dashboard activity.
Booking & payment data: guest names, travel dates, room selections, transaction amounts, payment status, invoice details, and limited payment metadata processed by our payment partners (we do not store full card numbers on our servers where tokenization is used).
Communications: support inquiries, contact form messages, email correspondence, and optional marketing preferences.
Technical & usage data: IP address, browser type, device information, pages viewed, referral URLs, session identifiers, and cookies or similar technologies as described below.
Third-party sign-in: if you use Google Sign-In, we receive basic profile information authorized by you (such as name, email, and Google account identifier) according to Google's policies.