Privacy Policy

Information we collect

We collect information you give us directly and a small amount of technical data generated when you use the site.

• Account details such as your name, email address, and phone number.
• Booking details such as stay dates, guest counts, and messages you exchange with your host.
• Payment details processed by Stripe. Onalani never stores full card numbers on its own servers.
• Technical data such as device type, browser, and pages viewed, used to keep the site secure and working correctly.

How we use your information

• Confirming reservations, processing payments, and issuing refunds or travel credits.
• Sending booking confirmations, check-in instructions, and service updates about your stay.
• Responding to support requests, complaints, and change requests.
• Detecting fraud, preventing abuse, and meeting legal and tax obligations.

How we share your information

We do not sell your personal information. We share it only with the service providers needed to deliver your stay, and only to the extent required.

• Payment processing with Stripe.
• Property operations and channel management with our booking systems.
• Email and messaging delivery for confirmations and support.
• Legal or regulatory authorities when we are required by law to respond.

Cookies and similar technologies

We use cookies to keep you signed in, remember search preferences, and understand how the site is used. You can block or delete cookies in your browser, though signing in and booking may stop working correctly if you do.

Data retention

Booking, payment, and tax records are retained for as long as required by law and legitimate accounting needs. Account and marketing data is deleted when your account is closed or when you ask us to remove it, unless we must keep it for a legal reason.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To make a request, contact us and we will respond within the timeframe required by applicable law.

Security

Access to guest data is restricted to staff who need it to run the business. Payments are handled by Stripe, and transport is encrypted in transit. No system is perfectly secure, so please use a strong, unique password for your account.

Contact us

Questions about this policy or about your data can be sent through the contact details in the site footer, or by replying to any booking email you have received from us.