Privacy policy
What we collect when you use casaduna.ae or stay with us, why, who sees it, how long we keep it, and your rights under UAE law.
1. Who we are
Casa Duna Property Management L.L.C - S.P.C ("Casa Duna", "we") runs casaduna.ae and the holiday homes listed on it, under Abu Dhabi commercial licence CN-5654594. We decide how the personal data described here is used, so we are its controller under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
Contact for anything in this policy: casaduname@gmail.com or WhatsApp +971 58 580 2785.
2. What we collect
Your booking request
The dates, the number of guests, the price shown to you, and a record that you accepted the booking terms, these Terms and this policy: the time, your IP address and your browser type.
Every guest's identity details
A photo of each guest's passport or Emirates ID, and for the lead guest the nationality, country of residence, date of birth, gender, document number, issue and expiry dates and purpose of the visit. If you drive, your car plate. We collect this for every guest, children included, because the law requires it (section 3).
Messages
What you write to us by email or WhatsApp.
Website data
Your IP address and browser type, which our hosting and security systems record to keep the site working and safe. We do not run advertising or analytics cookies (section 9).
3. Why we use it
| Purpose | Legal basis |
|---|---|
| To take, review, confirm and manage your booking | Performance of a contract, and steps you ask for before one exists |
| To register every guest with the Abu Dhabi Department of Culture and Tourism (DCT) and give records to the authorities when they ask | Legal obligation |
| To give the building's management the details it needs for access and parking | Legitimate interests, and performance of the contract |
| To keep tax, tourism-fee and accounting records | Legal obligation |
| To prove what was agreed, handle damage or disputes, and prevent fraud | Legitimate interests, and legal claims |
| To send you messages about your stay | Performance of a contract |
| To send you offers, only if you ask for them | Your consent, which you can withdraw at any time |
As a licensed holiday-home operator we must register the identity of every guest with DCT before check-in. We cannot confirm a booking or hand over a home without it. We do not sell your data, and no decision about you is made by a machine alone.
4. Who else handles it
We share your data only with:
- Our technology providers, who store or carry it for us and may not use it for anything else: Hostinger (the website and the emails it sends), Cloudflare (our booking system, where booking requests and ID photos are held), Google (our business email inbox), Telegram (internal staff messages about check-in registrations), and Lodgify (our reservation calendar).
- The Abu Dhabi Department of Culture and Tourism, the police and the tax authority, where the law requires us to register guests or produce records.
- The building's management and security, with the guest names, ID and car plate they need for access and parking.
- Booking platforms: if you booked through Airbnb, that platform also handles your data under its own policy.
- Professional advisers and insurers, where needed for a claim, dispute or legal matter.
Nobody receives your data for their own marketing.
5. Data outside the UAE
Some of these providers store data on servers outside the UAE, including Cloudflare, Google and Hostinger. We use them only under contracts that require them to protect the data and to use it only on our instructions. By booking you understand that your data is processed this way to provide the service you asked for.
6. How long we keep it
| Data | How long |
|---|---|
| ID photos in our booking system | Deleted automatically 180 days after upload |
| ID photos and registration details in our email | Deleted within 12 months after check-out, unless an authority or an open dispute needs them longer |
| Booking requests that do not become a stay | 12 months |
| The record that you accepted the terms | 3 years |
| Booking, payment, tax and tourism-fee records | As long as UAE tax law requires, currently 7 years |
| Damage or incident records | Until the matter is closed, then up to 12 months |
7. How we protect it
The site and the booking system only use encrypted connections. Passwords are stored scrambled. ID photos are kept in an access-controlled system and seen only by the people who register guests. We do not take or keep card details on this website. If a breach puts your privacy at risk, we will tell the UAE Data Office and you, as the law requires.
8. Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, except what the law makes us keep (DCT registration and tax records);
- stop or limit some uses of it, including anything based on our legitimate interests;
- give you the data you gave us in a format a computer can read;
- stop sending offers, at any time.
For anything else, email casaduname@gmail.com. We may ask you to prove who you are first, and we answer within the period the law allows. You can also complain to the UAE Data Office.
10. Children
Bookings are for adults; the lead guest must be 21 or older. We hold children's ID details only because they stay as part of a party and the law requires every guest to be registered. The adult who books gives them to us and confirms they may.
11. Changes
When we change this policy, the new version appears here with a new date. If a change matters for a booking you already have, we will tell you. Last updated 7 October 2026.
See also our Terms.