PRIVACY POLICY | Small Stays

Last updated: January 7, 2026

Welcome to the Small Stays website, accessible at https://small-stays.com (the “Site”). The Site and related services are operated by Small Stays LLC (“Small Stays,” the “Company,” “we,” “us,” or “our”). We are committed to protecting the privacy and security of personal data we collect in connection with our website, booking processes, and short-term rental operations (“Information”).

This Privacy Policy applies to Information collected through our Site and related services, including but not limited to: website usage, reservation and booking activities, identity verification, communications, and property access or occupancy associated with a reservation. For clarity, “property access or occupancy” refers to reservation-related access administration and operational records associated with a stay. It explains the categories of Information we collect, how we use and share it, and the choices available to you regarding your Information. We encourage you to review this Policy carefully.

This Privacy Policy applies to booking guests, authorized occupants, and website users whose Information is collected in connection with our Site, services, reservations, or property operations. Our services are operated from the United States but may be accessed by users worldwide. By using our Site or services, you acknowledge that your Information may be processed and stored in the United States and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When updates are made, the revised Policy will be posted on this page with the updated “Last Updated” date.

Our website and booking platform are hosted using third-party service providers, including Wix.com Ltd., which may process certain Information on our behalf in accordance with their own privacy policies and applicable data protection laws. We encourage you to review the privacy policies of such providers for additional information regarding their data handling practices.

Small Stays acts as the data controller for Information collected in connection with reservations, property operations, and service administration, while third-party service providers act as independent controllers or processors for Information they collect directly under their own privacy policies.

1. DATA WE COLLECT AND HOW WE USE IT

We may collect the following categories of Information through our website, booking processes, and related services. The specific Information collected depends on how you interact with our services.

1 / PERSONAL INFORMATION

Personal Information includes data that can be used to identify or contact you directly, such as your name, email address, phone number, mailing address, and other information you voluntarily provide when communicating with us, creating a reservation, or using our services. This may also include information contained in correspondence with us, including email signature blocks or inquiry submissions.

When you make a payment through our platform, payment-related information (such as payment method, billing details, and transaction history) is processed by third-party payment processors used by our platform provider (such as PayPal or Stripe). We do not store full credit card numbers or sensitive payment credentials, which are handled directly by these third-party processors in accordance with their own privacy policies.

2 / DEVICE INFORMATION

We may automatically collect information about the device you use to access our services. This may include IP address, device identifiers, browser type, operating system, language preferences, internet service provider, and device or browser settings. This Information helps us maintain security, prevent fraud, and ensure proper functionality of our services.

3 / USAGE INFORMATION

Usage Information includes data about how you interact with our website and services, such as pages visited, links clicked, time spent on pages, access timestamps, log files, performance metrics, and diagnostic or error data. This Information is used to analyze usage trends, improve functionality, enhance user experience, and maintain platform reliability.

4 / BOOKING, TRANSACTION & SERVICE-RELATED INFORMATION

When you make or manage a reservation, we may collect Information related to your booking, including reservation details, stay dates, property information, pricing, service fees, refunds, communications, and service interactions. This Information is used to process reservations, provide access to properties, support guests, and administer our services, including verifying eligibility, enforcing our Terms of Use and House Rules, and addressing disputes or compliance issues.

5 / COLLECTION METHODS

We collect Personal Information when you voluntarily provide it to us. Other categories of Information, such as Device Information and Usage Information, are collected automatically through technologies including cookies, software development kits (SDKs), log files, and similar tools, as further described in this Privacy Policy.

Certain Device and Usage Information may be processed by our website hosting and payment platform providers to support functionality, security, analytics, and transaction processing.

2. PERSONAL DATA

You may browse the Site without providing Personal Data. However, certain features and services—such as submitting inquiries, making reservations, completing identity verification, or communicating with us—require the collection of Personal Data.

Personal Data may include information such as your name, email address, phone number, billing details, IP address, and any other information you voluntarily provide when interacting with our services. In some cases, Personal Data may also be required to verify identity, process reservations, prevent fraud, ensure safety, or enforce our Terms of Use and related agreements.

We use Personal Data for legitimate business purposes, including responding to inquiries, administering reservations, communicating regarding services or bookings, improving our services, maintaining security, and complying with legal obligations.

For clarity, Small Stays processes Personal Data to fulfill its contractual obligations in providing short-term rental services, to verify identity and eligibility, to prevent fraud, to support safety and property compliance, to enforce our Terms of Use and House Rules, and to meet applicable legal or regulatory requirements.

By submitting Personal Data to us—whether directly, through our Site, or via third-party service providers acting on our behalf—you acknowledge and consent to the collection, use, and disclosure of your Personal Data as necessary to provide our services and as described in this Privacy Policy, subject to applicable laws and your rights as outlined herein.

3. DEVICE INFORMATION & USAGE DATA

When you access or use our Site or services, we and our service providers may automatically collect certain Device Information and Usage Data, regardless of whether you provide Personal Data. This Information may be collected through technologies such as analytics tools, cookies, log files, and similar mechanisms.

Device Information may include details such as IP address, device identifiers, browser type, operating system, language settings, referring URLs, and other technical information related to the device used to access our services.

Usage Data may include information about how you interact with our Site and services, such as pages viewed, features accessed, links clicked, timestamps, session duration, error logs, and performance metrics.

We use Device Information and Usage Data for legitimate business purposes, including:

Operating, maintaining, and optimizing our services
Monitoring and enhancing security and fraud prevention
Analyzing usage trends and website performance
Improving functionality and user experience
Supporting internal research and operational planning

We may also use Device Information and Usage Data to support short-term rental operations, including reservation processing, access administration, identity verification signals (such as device data for risk scoring), and compliance with our Terms of Use and related policies.

Our Site and booking platform are hosted by third-party service providers, including Wix.com Ltd., which may process Device Information and Usage Data on our behalf in accordance with their own privacy policies and applicable data protection laws. We encourage you to review the privacy policies of such providers for additional information.

We may share Device Information and Usage Data in aggregated or de-identified form with service providers, partners, or affiliates for analytics, security, administrative, or operational purposes. Such Information does not directly identify you.

We may disclose Device Information and Usage Data when required or permitted by law, including:

To comply with legal obligations, court orders, or lawful requests by authorities
To investigate, prevent, or address fraud, security incidents, or violations of our Terms of Use or other agreements
To support reservation delivery, property access systems, or enforcement of House Rules and related agreements
In connection with a corporate transaction, such as a merger, acquisition, asset sale, or reorganization

4. PAYMENT PROCESSING

Payments made through our Site are processed using third-party payment services provided through our website platform provider, including Wix Payments and its authorized payment processors (such as PayPal or Stripe).

When you submit payment information in connection with a reservation or service, your payment details (including billing information and payment method) are collected and processed directly by these third-party payment processors in accordance with their own privacy policies and security practices. Small Stays does not store full credit card numbers or sensitive payment credentials.

Payment processors and platform providers may collect, use, and retain transaction-related information, such as payment amounts, dates, currencies, and transaction history, for purposes including payment processing, fraud prevention, chargeback management, and compliance with legal and financial reporting obligations.

Because payment information is used to fulfill reservations and provide short-term rental services, Small Stays may also use certain transaction-related data to verify eligibility, detect and prevent payment-related fraud, support reservation enforcement, and comply with applicable laws and tax reporting requirements.

Because our platform providers operate globally, personal and payment-related information processed in connection with payments may be transferred to, processed, and stored in jurisdictions outside of your state or country of residence. Such processing is performed in accordance with applicable data protection laws.

For additional information regarding how payment-related information is handled, please review the privacy policies of our platform and payment service providers, including Wix.com Ltd., available at: https://www.wix.com/about/privacy.

5. AUTOMATED DATA COLLECTION / COOKIES

We use cookies and similar tracking technologies to operate our Site, enhance functionality, analyze usage, and improve user experience. These technologies allow us and our service providers to recognize your browser or device and collect certain Information automatically.

Cookies are small data files stored on your device when you visit a website. They help enable core functionality, remember user preferences, and provide insight into how the Site is used. Some cookies are necessary for the Site to function properly, while others support analytics and performance improvements.

You may manage or modify your cookie preferences through your browser settings or, where available, through the cookie preference banner displayed on our Site. Please note that disabling certain cookies may affect the availability or functionality of some features.

For general information about cookies, visit www.allaboutcookies.org.

Categories of Cookies We Use:

Essential Cookies / These cookies are required for the basic operation, security, and integrity of the Site. They enable features such as authentication, session management, fraud prevention, and network security. Essential Cookies are also required to support reservation processing, account access, identity verification workflows, and enforcement of our Terms of Use. Essential cookies cannot be disabled because the Site may not function properly without them.

Functional Cookies / Functional cookies allow the Site to remember preferences and settings (such as language or region) to provide a more personalized experience. These cookies are not strictly necessary but improve usability.

Performance and Analytics Cookies / These cookies collect information about how visitors use the Site, such as pages visited, time spent on pages, and error reports. This Information is used in aggregated form to analyze performance, identify issues, and improve functionality. Analytics data does not directly identify individual users.

Targeting or Advertising Cookies / Where applicable, targeting cookies may be used by third-party services to deliver content or advertising that may be more relevant to your interests. These cookies are governed by the privacy policies of the respective third-party providers.

Third-Party Cookies and Technologies / Our Site may permit third-party service providers, such as analytics platforms or integrated tools, to place cookies or similar technologies on your device. We do not control these third-party technologies, and their use is governed by the privacy policies of the respective providers.

In addition to cookies, we may use similar technologies such as web beacons or pixel tags to understand Site usage, measure engagement, or evaluate the effectiveness of communications. These technologies operate in conjunction with cookies and do not independently collect Personal Data.

6. PERSONAL DATA RETENTION

We retain Personal Data and other Information collected under this Privacy Policy for as long as reasonably necessary to provide our services, fulfill the purposes for which the Information was collected, and support legitimate business operations. These purposes may include, without limitation, administering reservations, maintaining security, preventing fraud, enforcing our Terms of Use and related agreements, resolving disputes or claims, conducting audits, and complying with applicable legal, regulatory, and contractual obligations.

Certain categories of Information may be retained for longer periods where required or permitted by law, including financial transaction records, identity verification data, and records related to disputes, chargebacks, claims, or enforcement actions. Such Information may be retained for the minimum duration required under applicable tax, accounting, insurance, or legal requirements, or as reasonably necessary to protect our rights and property.

Submission of a privacy rights request does not cancel, invalidate, or otherwise affect active reservations, completed stays, pending disputes, chargebacks, or enforcement actions under our Terms of Use, to the extent permitted by law.

When Personal Data is no longer required for the purposes described above and is not subject to a legal retention obligation, we will take reasonable steps to delete or anonymize such Information in accordance with applicable laws and our internal data management practices.

7. PRIVACY AND SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data and other Information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures are intended to help maintain the security and integrity of Information collected through our services.

However, no method of transmission over the Internet or electronic storage is completely secure. While we take reasonable steps to safeguard Information, we cannot guarantee absolute security, and any transmission of Information to or from our services is at your own risk. Security obligations and limitations relating to use of the Site and services are further addressed in our Terms of Use.

In the event of a data breach involving Personal Data, we will take appropriate steps to investigate, mitigate potential impacts, and provide notifications as required by applicable law.

If you believe that your Personal Data has been misused, improperly accessed, or compromised in connection with our services, please contact us promptly at info@small-stays.com so we can review and address the issue.

8. PROFILING & MARKETING

We do not engage in profiling or automated decision-making that produces legal or similarly significant effects on individuals, as defined under applicable privacy laws. We do not use Personal Data for targeted advertising or marketing purposes.

We may, however, use limited automated processes and analytics tools for purposes such as security monitoring, fraud prevention, identity verification, service optimization, and compliance with our Terms of Use and related agreements. These activities are designed to support legitimate business operations and do not constitute profiling for marketing or advertising purposes. Such processes may inform booking eligibility, access permissions, or enforcement decisions, but are not used for targeted advertising or behavioral marketing.

9. IDENTITY VERIFICATION & GUEST SCREENING

To support safety, fraud prevention, and trust across our properties, Small Stays may require guests to complete identity verification and guest screening prior to confirming a reservation or being permitted to occupy a property. These processes may be facilitated through third-party service providers, including Truvi.

Identity verification and screening may involve the collection and processing of certain Personal Data, which may include government-issued identification, self-submitted images for facial matching or liveness verification, and automated fraud or risk-based screening signals. These processes are used solely to verify identity and assess booking or occupancy risk.

Identity verification and guest screening conducted through our services do not constitute criminal background checks, credit checks, or consumer reports, and Small Stays does not request, receive, or rely upon criminal history records or credit reports in connection with these processes.

Completion of required identity verification or screening is a condition of booking and occupancy. Failure to successfully complete verification, refusal to participate, or submission of inaccurate, misleading, or incomplete information may result in cancellation of a reservation, denial of occupancy, or restriction from future bookings, in accordance with our Terms of Use and related agreements. Such outcomes reflect eligibility determinations under our Terms of Use and are not disciplinary or punitive actions.

Personal Data collected in connection with identity verification or guest screening is processed in accordance with this Privacy Policy and the privacy policies of our verification service providers. Small Stays may receive verification results or risk indicators necessary to make booking or occupancy decisions but does not receive underlying identity documents or sensitive biometric data beyond what is required for verification purposes.

Data collected by third-party verification providers is retained and handled in accordance with their own data retention policies and applicable laws. Requests regarding access to or deletion of data held by a verification provider must be directed to that provider, subject to legal and contractual limitations. You may review Truvi’s Privacy Policy at the time of verification for additional information regarding their data practices.

Any disputes related to identity verification or guest screening are subject to the dispute resolution provisions set forth in our Terms of Use.

10. PROPERTY ACCESS, MONITORING & SAFETY DEVICES

Certain properties operated by Small Stays may utilize access control, safety, and monitoring technologies to support property security, guest safety, fraud prevention, and enforcement of our Terms of Use, House Rules, and related agreements. House Rules are property-specific rules applicable to individual stays and are incorporated by reference into our Terms of Use.

Such technologies may include, without limitation:

Smart locks or electronic access systems that record access activity
Noise monitoring devices designed to detect excessive noise levels
Exterior security cameras monitoring entry points or common exterior areas
Environmental or safety sensors (such as smoke, carbon monoxide, or water leak detectors)

Information regarding the presence, purpose, and scope of such devices is disclosed through property listings, House Rules, or pre-stay communications provided to guests. These devices are used solely for operational, safety, security, and compliance purposes. No devices are used to monitor private indoor living spaces or to record audio or video within areas intended for personal privacy, except where explicitly disclosed and permitted by applicable law.

Information collected through these technologies may be used to administer reservations, provide property access, investigate incidents, enforce policies, resolve disputes, and comply with legal or insurance requirements. Such Information may also be relied upon to support enforcement actions, eligibility determinations, or dispute resolution under our Terms of Use. Such information is retained and handled in accordance with this Privacy Policy and applicable law.

11. ELIGIBILITY

Our services are intended for individuals who are legally eligible to use them. You may browse the Site without providing Personal Data; however, to use our services, create a reservation, or submit Personal Data, you must meet the eligibility requirements set forth in our Terms of Use.

In general, individuals must be at least 21 years of age to make a reservation or use our services. We do not knowingly collect Personal Data from individuals under the age of 18. If we become aware that we have inadvertently collected Personal Data from a person under 18 years of age, we will take reasonable steps to delete such information in accordance with applicable law.

If you are a parent or legal guardian and believe that a minor under the age of 18 has provided Personal Data to us without appropriate authorization, please contact us promptly at info@small-stays.com so that we may investigate and take appropriate action.

Eligibility determinations under our Terms of Use may be based on Information collected in accordance with this Privacy Policy, including age verification, identity verification results, booking history, and compliance with applicable rules and requirements.

12. CALIFORNIA PRIVACY RIGHTS

This section applies solely to residents of the State of California, in accordance with the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

SHINE THE LIGHT / Under California’s “Shine the Light” law (Civil Code §1798.83), California residents may request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. Small Stays does not share personal information with third parties for their own direct marketing purposes as defined by this law.

Requests under the Shine the Light law may be submitted once per calendar year by emailing info@small-stays.com.

RIGHTS UNDER THE CCPA/CPRA / California residents have the following rights with respect to their personal information, subject to certain exceptions permitted by law:

RIGHT TO KNOW / ACCESS
You may request information regarding:

The categories of personal information we collect
The sources from which personal information is collected
The purposes for which personal information is used
The categories of third parties with whom personal information is shared
The specific pieces of personal information we have collected about you

RIGHT TO DATA PORTABILITY

You may request a copy of the personal information we have collected about you in a portable and, where technically feasible, readily usable format.

RIGHT TO CORRECT

You may request that we correct inaccurate personal information we maintain about you.

RIGHT TO DELETE

You may request that we delete personal information we have collected from you, subject to legal, contractual, security, fraud-prevention, and enforcement-related exceptions.

RIGHT TO OPT-OUT OF SALE OR SHARING

Small Stays does not sell personal information. Where applicable, you may request to opt out of the sharing of personal information for cross-context behavioral advertising purposes.

RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION

Where applicable, you may request limitations on the use or disclosure of sensitive personal information, subject to permitted business purposes under the CCPA/CPRA.

RIGHT TO NON-DISCRIMINATION

You have the right not to receive discriminatory treatment for exercising any of your privacy rights.

Submitting a Verifiable Consumer Request

To exercise your California privacy rights, you must submit a verifiable consumer request. The request must provide sufficient information for us to verify your identity and understand the scope of your request.

You may submit a request by:

Email: info@small-stays.com
Phone: (786) 905-4347

Only you, or a person legally authorized to act on your behalf, may submit a request. We may request additional information to verify your identity. If we are unable to verify your identity or determine that a request is fraudulent or excessive, we may deny the request as permitted by law.

Nothing in this section limits Small Stays’ ability to retain or process personal information where necessary to comply with legal obligations, prevent fraud, protect safety, enforce our Terms of Use, or exercise or defend legal claims, as permitted under applicable law.

13. NEVADA PRIVACY RIGHTS

Under Nevada Revised Statutes Chapter 603A, Nevada residents have the right to submit a request directing a business not to sell certain covered personal information. Small Stays does not sell personal information as defined under Nevada law.

Nevada residents who wish to submit a request regarding the sale of personal information, or who have questions about our data practices, may contact us at info@small-stays.com. We will respond to such requests in accordance with applicable law.

For clarity, disclosures of personal information to service providers for purposes such as payment processing, identity verification, fraud prevention, security, reservation administration, or enforcement of our Terms of Use do not constitute a “sale” of personal information under Nevada law.

14. VA, CO, CT and UT PRIVACY RIGHTS

This section applies to residents of Virginia, Colorado, Connecticut, and Utah and describes rights available under applicable state privacy laws, including the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Utah Consumer Privacy Act (UCPA).

Subject to applicable law and certain exceptions, residents of these states may have the following rights:

RIGHT TO DATA PORTABILITY
You may request access to the personal data we maintain about you and, where applicable, receive a copy of such data in a portable format.

RIGHT TO CORRECT
You may request that we correct inaccurate personal data we maintain about you.

RIGHT TO DELETE
You may request deletion of personal data we have collected about you, subject to legal, security, fraud-prevention, and contractual exceptions.

RIGHT TO OPT-OUT OF TARGETED ADVERTISING
Where applicable, you may opt out of the processing of personal data for targeted advertising purposes.

RIGHT TO OPT-OUT OF CERTAIN PROFILING
Where applicable, you may opt out of profiling conducted in furtherance of decisions that produce legal or similarly significant effects, as defined under applicable law.

RIGHT TO NON-DISCRIMINATION
You will not be discriminated against for exercising any of the rights described above.

Please note that these rights are not absolute. We may decline or limit a request where permitted by law, including where compliance would interfere with security, fraud prevention, identity verification, legal obligations, or enforcement of our Terms of Use.

Residents of these states may submit privacy-related requests using the contact information provided in this Privacy Policy. Where required by law, you may also appeal a decision regarding your request by following the instructions provided in our response.

Nothing in this section requires Small Stays to delete, restrict, or cease processing personal data where such processing is necessary to provide services, verify identity, prevent fraud, ensure safety, comply with legal obligations, or enforce our Terms of Use, as permitted under applicable law.

15. PRIVACY POLICY MODIFICATIONS

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When updates are made, the revised Privacy Policy will be posted on this page with the updated “Last Updated” date indicated at the top.

We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use, and protect personal information. Unless otherwise stated, changes to this Privacy Policy will take effect immediately upon posting.

If you have questions or concerns regarding updates to this Privacy Policy, you may contact us at info@small-stays.com with “Privacy Policy” in the subject line.

16. LEGAL

This Privacy Policy is incorporated into and governed by our Terms of Use, which set forth additional terms, conditions, and limitations applicable to your use of our services. In the event of any conflict between this Privacy Policy and the Terms of Use, the Terms of Use shall control to the extent permitted by law.

Any disputes, claims, or controversies relating to privacy, data practices, or the handling of Personal Data are subject to the dispute resolution provisions set forth in our Terms of Use, to the extent permitted by applicable law.

For questions or notices regarding this Privacy Policy, contact Small Stays at: info@small-stays.com (Subject: “Privacy Policy”).

This contact information may also be used to submit privacy rights requests, inquiries regarding Personal Data, or questions related to data handling practices, subject to verification requirements described in this Privacy Policy.