WHAT PERSONAL DATA WE COLLECT AND WHY

WWStay collects personal information like name, email address, date of birth, payment information from travelers to provide them quotes and eventually book accommodation and for the performance of the contract signed with our clients (Traveler's employers), (ii) the visitors and users of WWStay websites and (iii) Accommodation providers for providing them with travelers to support their business.

Certain types of personal information, such as government-issued identification numbers, religion, health or sexuality, are considered sensitive and require additional protection under applicable laws. We take appropriate steps to limit the circumstances under which we may collect sensitive personal information; examples of this information include Health-related information may be needed to provide appropriate travel accommodations and accessibility or facility requirements.

The purposes for which we collect your personal information are

• To complete your and your travel companion's travel bookings, this includes sharing your booking information with other parties to fulfil your booking and providing you quotes.

• Provide you technical and travel support for your traveling requirements.

• To facilitate app integrations e.g. Concur.

• To fulfil our contractual commitment and for the performance of our contract with our client

• Provide you with the services, support or information requested and monitor the effectiveness

• Improve our website’s user experience and communicate better to engage users

• Enhance the effectiveness of our marketing campaigns. To send marketing emails or messages related to our products and services

• Monitor aggregate metrics to conduct our market research and understand our customers better

• To process your job application for an open position.

• Analyze, diagnose and fix issues in our product and service offerings.

 

PERSONAL INFORMATION COLLECTED ON OUR WEBSITE

As a general practice, no personal Information is collected about a visitor to the website, apart from the personal information submitted by the visitor himself / herself in a ‘Contact Us’ form. We shall use such Personal Information for the purpose you share it with us. However, at times, certain information may be collected from you when you visit the website. Such information is aggregated to measure the number of visits, average time spent on the website, pages viewed etc. This provides information to do internal research on our users' demographics, interests, and behavior to better understand, protect and serve our users. Although IP is captured, we do not link IP addresses to anything personally identifiable. This means that a user’s session will be tracked, but the user will be anonymous. Please see our Cookie Policy <https://wwstay.com/cookie-policy.html> to understand how we use cookies.

Our primary goal in doing so is to provide you a safe, efficient, smooth and customized experience. This allows us to provide services and features that most likely meet your needs, and to customize our Website to make your experience safer and easier.

 

SHARING OF PERSONAL INFORMATION

In all cases any of your personal information is not shared with any third party. It is used by WWStay to provide services and features that most likely meet your needs, and to customize our Website to make your experience safer and easier.

In some cases, like with hosted services, we may share information with those that provide us with technology services (e.g. web hosting and analytics services), but strictly for carrying out our work. All such vendors used by us are EU GDPR compliant and have signed a Data Protection Agreement with WWStay to secure your data.

WWStay may disclose the personal information – (i) if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process(es); (ii) to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms or Privacy Policy; respond to claims that an advertisement, posting or other content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public.

Furthermore, WWStay works with Accommodation providers (i.e. sub-processors) for providing accommodations and for the management of certain administrative and information technology tools and platforms. Such subcontractors may access your personal data but only for, on behalf of, and under the instructions of WWStay, and are required to adhere to WWStay policies, procedures and processes and comply with applicable privacy laws. It's important to note that when you submit your personal details at property they are governed by Privacy policy of the property and not by WWStay.

 

SECURITY PRECAUTIONS / RETENTION / DATA INTEGRITY / ACCESS

We have stringent security measures in place to protect the loss, misuse, unauthorized access, improper use or disclosure, unauthorized modification, alteration of the information under our control and unlawful destruction or accidental loss. Personal Information that we collect will be stored and backed up securely.

We take all reasonable precautions to ensure that the personal information (if any) that we collect, use and disclose is accurate, complete and up-to-date. However, the accuracy of that personal information depends to a large extent on the information that you provide. You can have access to your personal information that we have in our possession or control and may request that your personal information be amended for purposes of accuracy and completeness.

If we merge with or are acquired by another company, and if all our assets are acquired by another company, this information will most likely be one of the assets to be transferred. However, we will not transfer any personal information of our customers until absolutely necessary to provide you with a continuity of service and only when the new owner maintains and provides the same level of data privacy standards as we do. In such cases, we will provide you with notice and an opportunity to opt-out of the transfer of identifiable data. We understand that the security of your information is vital and have in place strong administrative, technical, and physical security controls and measures to keep data safe and secure. Our privacy practices are designed to provide protection for your personal information, all over the world.

To protect information stored in our servers, through Amazon Web Service infrastructure at various locations like the UK, access is limited (through user / password credentials and two factor authentication) to those employees who require it to perform their job functions. We use industry- standard Secure Socket Layer (SSL) encryption technology to safeguard the account registration process and sign-up information. Other security safeguards include but are not limited to multifactor authentication, data encryption, firewalls, and physical access controls to building and files.

We would like to caution our visitors about phishing attacks, wherein unscrupulous third parties seek to extract sensitive and confidential information from you by posing as a genuine website or by sending an email misrepresenting it to be from a genuine source. Please be aware that we never seek sensitive or confidential information such as regarding your financial or health record through emails or through our websites. If you receive such a message claiming to be from WWStay, then please do not reply to it and immediately bring it to our attention by contacting our Data Protection officer.

 

CAN THIS INFORMATION BE REVIEWED?

In some cases, and at our discretion this information may be accessed by you to correct any mistake in that information, and to delete any information we no longer have business reasons for retaining. You can do this by sending us an email. WWStay strives to comply with all applicable laws around the globe that are designed to protect your privacy and information, no matter where that information is collected, transferred, or retained. Although legal requirements may vary from country to country, we intend to adhere to the principles set forth in this Privacy Policy even if information is transferred from your country to other countries that may not require an adequate level of protection for your information.

​

RIGHTS OVER YOUR PERSONAL DATA

Under certain circumstances, by law you have the right to:

• Be informed about the processing of your personal data (i.e. for what purposes, what types, to what recipients it is disclosed, storage periods, any third-party sources from which it was obtained, confirmation of whether we undertake automated decision-making, including profiling, and the logic, significance and envisaged consequences).

• Object to your personal data being processed for a purpose or to request that we stop using your information.

• Request not to be subject to a decision based on automated processing and to have safeguards put in place if you are being profiled based on your personal data.

• Ask us to transfer a copy of your personal data to you or to another service provider or third party where technically feasible and otherwise required by applicable regulations.

• Withdraw, at any time, any consent that you have previously given to us for our use of your personal data.

• Ask us to stop or start sending you marketing messages at any time.

• Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your working relationship with us.

• Request the erasure of your personal data. This enables you to ask us to delete or remove personal data where you think that we do not have the right to process it.

• Any request for access to or a copy of your personal data must be in writing and we will endeavor to respond within a reasonable period and in any event within one month in compliance with Data Protection Legislation. We will provide this information free of charge unless the request is manifestly unfounded or excessive. We will comply with our legal obligations about any individual’s rights as a data subject.

If you would like to contact us in relation to any of the rights set out above please contact us by email dpo@wwstay.com. To protect your privacy and security, we may take reasonable steps to verify your identity before providing you with the details.

 

RIGHT TO COMPLAIN TO THE ICO

You can contact the ICO if you have any concerns about how WWStay has handled your personal data and you also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO via their helpline on 0303 123 1113. You can find out more information about your rights as a data subject, regulatory powers and actions they can take on their website https://ico.org.uk/

 

NOTIFICATION OF CHANGES

If we decide to change our privacy policy, we will post those changes on this page, so our users are always aware of the information we collect and how we use it. If at any point we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way of an email. Users will have a choice as to whether we use their information in this different manner. We will use information in accordance with the privacy policy under which the information was collected. For any additional information please contact our Privacy Office and Data Protection Officer at dpo@wwstay.com