Tiny Living Apartments

Privacy · Compliance · Trust

Privacy Policy

We respect your privacy. This page explains exactly what we collect when you book a stay at Tiny Living Apartments, how we use that data, and the strict boundaries around the third-party systems that handle your payments.

Last updated: 4 June 2026

  1. 1

    Data We Collect

    When you make a booking we collect:

    • Your name, email address, phone number and country of residence.
    • Number of guests in your party (adults / children / toddlers).
    • Check-in and check-out dates.
    • Payment method and payment status (paid, pending, cancelled).
    • Special requests you choose to share.
    • For bank-deposit bookings: your refund-account bank, account name and account number.
    • A government-issued photo ID at the time of door-code generation (see our ID Verification page).

    We also collect server access logs (IP address, browser user agent, request paths) for 30 days for security and abuse prevention.

  2. 2

    Stripe — We Never See Your Card

    Card payments are processed by Stripe, Inc. under their own PCI-DSS compliant infrastructure. We do not have access to your full card number, expiry date or CVC at any point.

    The only card-related data we retain is what Stripe surfaces back to us for refund and dispute purposes: the brand (Visa / Mastercard / Amex), the last four digits, the payment status, and Stripe's internal references (payment intent ID, refund ID). Stripe's own privacy practices are published at stripe.com/privacy.

  3. 3

    Direct Nepali Bank Transfers

    For bookings paid by direct bank transfer, you supply your refund-account bank, account name and account number so we can return your security deposit (and any refund) to the right place after check-out.

    We do not sell, share, or otherwise misuse those details. They are used solely to process refunds for the booking they were supplied for, and are removed from our system within 90 days of the refund settling, unless there is an active dispute.

  4. 4

    How We Use Your Data

    • To confirm and run your booking — including notifying you and the host.
    • To generate and deliver the smart-lock Door Access Code (PIN) at the right time.
    • To process refunds via Stripe or to your specified bank account.
    • To respond when you contact us via WhatsApp or email.
    • To produce aggregated, non-identifying analytics on which pages convert — never tied to a named guest.
  5. 5

    Who We Share With

    • Stripe — for card payments, under their published privacy policy.
    • Our content + booking platform (Strapi on Railway) — where booking records are stored. The provider has its own published privacy policy and security posture.
    • Vercel — for serving the website. Edge logs only.
    • Hostex — only your stay dates (not your name, contact details or ID) for cross-channel availability sync with Airbnb and Booking.com.
    • Email / WhatsApp delivery providers — to send booking confirmations and check-in reminders.
  6. 6

    Retention

    • Booking records: 7 years (Nepal tax and consumer-law requirement).
    • Government-issued ID images: destroyed 24 hours after check-out, unless there is an active dispute.
    • Refund-account details: removed within 90 days of the refund settling.
    • Server access logs: 30 days.
  7. 7

    Your Rights

    You can request a copy of your data, correction, or deletion (subject to the 7-year booking-record retention above) by emailing the address on the Contact page. We reply within 14 days.

  8. 8

    Cookies

    We use a small number of essential cookies for booking state, currency/language preferences and host login. No third-party analytics or advertising cookies, ever.

  9. 9

    Children

    Tiny Living Apartments is not intended for children to book independently. Bookings for under-18 guests must be made by a parent or guardian.

  10. 10

    Changes to This Policy

    We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will also be flagged on our homepage for 30 days.

Privacy Questions

Anything you'd like clarified before booking? Use the Contact page. We're based at Lwathi Galli, New Plaza, Putalisadak, Kathmandu, Nepal.