Privacy Policy

Last updated: November 13, 2025

MyStay Fiji ("we," "our," or "us") operates mystayfiji.com, a hotel booking platform powered by Nuitée's booking technology and APIs. This Privacy Policy explains:

  • What data MyStay Fiji collects and stores (account authentication and booking data for platform functionality)
  • What data Nuitée Travel Limited collects and processes (all booking processing and payment data)
  • How data is used and protected

🔒 CRITICAL NOTICE:

MyStay Fiji stores booking data (guest names, contact details, hotel information, dates, pricing) in our database for platform functionality (displaying bookings, sending confirmation emails, managing access). However, Nuitée Travel Limited handles all booking processing, payment processing, and customer support. MyStay Fiji never receives, processes, or stores payment card information, CVV codes, or banking details - these are handled entirely by Nuitée via Stripe. When you make a booking, your data is also subject to Nuitée's Privacy Policy.

Who We Are

MyStay Fiji operates the mystayfiji.com website platform. We provide the user interface, design, and website functionality. We store account authentication data (email and password) and booking data (guest information, hotel details, dates, pricing) for platform functionality such as displaying bookings to users, sending confirmation emails, and managing booking access. However, we do not process payments or handle booking confirmations - these are handled by Nuitée.

Nuitée Travel Limited is a company incorporated and registered in Ireland. Their registered office is located at 4 Waterloo Rd, Ballsbridge, Dublin, D04 A0X3, Ireland, Company Registration Number 570685. Nuitée handles all booking-related data, payment processing, and customer support.

What This Policy Covers

This Privacy Policy describes how MyStay Fiji collects, uses, processes, and shares personal information, including account authentication data and booking data stored for platform functionality. This policy also explains how Nuitée Travel Limited handles booking processing, payment processing, and customer support when you make a reservation through mystayfiji.com.

This policy applies to all users of mystayfiji.com and our services. When you make a booking, your booking data is also subject to Nuitée's Privacy Policy, as Nuitée handles the actual booking processing and payment transactions.

1. Information We Collect

1.1 Information MyStay Fiji Collects

MyStay Fiji collects and stores:

  • Account information: Email address, password (hashed and encrypted)
  • Booking data (for platform functionality): Guest names, contact details (email, phone), hotel information, travel dates, number of guests, room details, pricing information, special requests, booking status
  • Website usage: IP address, browser type and version, device information, pages visited
  • Cookies: Session management, preferences (currency, language)
  • Location data: General location based on IP address (not precise location)

🔒 Critical: MyStay Fiji stores booking data for platform functionality (displaying bookings, sending emails, managing access), but we do NOT collect, process, or store payment card information, CVV codes, or banking details. Payment information is handled entirely by Nuitée via Stripe.

1.2 Information Nuitée Collects and Processes

When you make a booking through mystayfiji.com, Nuitée Travel Limited collects and processes:

  • Personal Identification Information: Guest names, email address, phone number, etc.
  • Booking details: Travel dates, hotel selection, number of guests, room preferences, special requests
  • Payment information: Credit card details, CVV codes, billing address (collected directly by Nuitée via Stripe - never touches MyStay Fiji servers)
  • Technical Data: IP address, browser type and version, time zone setting, location, browser plug-in types and versions, operating system and platform
  • Usage Data: Information about how you use the booking platform
  • Marketing and Communications Data: Your preferences in receiving marketing from Nuitée and your communication preferences

Important: Nuitée handles all booking processing, payment processing, and customer support. MyStay Fiji stores a copy of booking data for platform functionality (displaying bookings, sending emails), but payment card information is never stored by MyStay Fiji - it is handled entirely by Nuitée via Stripe.

1.3 Data Flow Clarification

When you book on mystayfiji.com:

  1. You create an account with MyStay Fiji (email + password) - stored by MyStay Fiji
  2. You search hotels using Nuitée's API - search data goes to Nuitée
  3. Booking data (guest names, dates, hotel selection) is sent to Nuitée for processing
  4. MyStay Fiji stores a copy of booking data in our database for platform functionality (displaying bookings, sending confirmation emails, managing access)
  5. Payment information is collected directly by Nuitée via Stripe - MyStay Fiji never receives, processes, or stores payment card data
  6. Nuitée processes the booking and payment, then sends confirmation to both you and MyStay Fiji
  7. MyStay Fiji uses the stored booking data to display your bookings in your account and send confirmation emails

2. How We Use Your Information

MyStay Fiji uses stored data for:

  • Account authentication and login
  • Storing and displaying bookings in your account
  • Sending booking confirmation emails and vouchers
  • Managing booking access (for guest access via secure tokens)
  • Facilitating cancellations and amendments through our platform (which then calls Nuitée's API)
  • Website functionality and improvement
  • Analytics and usage patterns
  • Security and fraud prevention

Nuitée uses booking data for:

  • Processing and confirming bookings
  • Managing cancellations and amendments
  • Payment processing
  • Customer support
  • Sending booking confirmations and vouchers
  • Maintaining booking records
  • Compliance with legal obligations

Nuitée collects this data under the lawful bases set out in the GDPR, which include your consent, contract performance, legitimate business interests, and compliance with legal obligations.

We do NOT use your information for: Processing payment card data (handled by Nuitée via Stripe), processing bookings with hotels (handled by Nuitée), or handling refunds (handled by Nuitée). We store booking data for platform functionality only.

3. Information Sharing and Disclosure

3.1 MyStay Fiji Shares With:

  • Nuitée: Booking data is sent to Nuitée for processing. Nuitée also receives booking data directly when you make a booking through our platform
  • Cloud hosting services: Vercel (for website hosting) - account and booking data is stored securely
  • Email service providers: For sending booking confirmation emails and transactional emails
  • Analytics services: For website performance (e.g., Vercel Analytics)
  • Authentication services: For account management (e.g., NextAuth)

Important: MyStay Fiji stores booking data in our database for platform functionality, but we do not share payment card information as we never receive it. Payment data is handled entirely by Nuitée via Stripe.

3.2 Nuitée Shares Booking Data With:

  • Hotels/accommodation providers: Guest information for reservation fulfillment
  • Payment processors: Stripe (payment information collected directly by Stripe)
  • Third-party service providers: Who perform functions on Nuitée's behalf (web hosting, data analysis, customer service, marketing assistance)

Nuitée ensures that their third-party service providers respect your personal data and comply with GDPR and other relevant data protection laws. Please refer to Nuitée's Privacy Policy for full details.

3.3 Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal obligations, court orders, or government requests
  • Protect our rights, property, or safety
  • Prevent fraud, abuse, or security issues
  • Protect the rights or safety of our users or the public

3.4 We Do NOT Sell Your Data

MyStay Fiji does not sell, rent, or trade your personal information to third parties for marketing purposes. Nuitée also does not sell your booking data. Please refer to Nuitée's Privacy Policy for their data sharing practices.

4. Data Security

MyStay Fiji: We implement appropriate technical and organizational security measures to protect account authentication data and stored booking data:

  • Encryption of data in transit (SSL/TLS)
  • Password hashing and secure storage
  • Secure data storage and access controls for booking data
  • Regular security assessments and updates
  • Access tokens for secure guest access to bookings

Nuitée: Nuitée uses appropriate technical and organizational measures to protect the personal information they collect and process about you. Please refer to Nuitée's Privacy Policy for details on their security practices.

Important: Payment card information is handled entirely by Nuitée via Stripe and never touches MyStay Fiji servers. Please refer to Stripe's security practices and privacy policy for payment security information.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Payment Information

🔒 CRITICAL SECURITY NOTICE:

MyStay Fiji NEVER collects, processes, transmits, or stores credit card information, CVV codes, or banking details.

All payment data is collected and processed by Nuitée Travel Limited via Stripe. When you enter payment information on mystayfiji.com, it is transmitted directly to Nuitée's payment gateway (powered by Stripe) and never passes through MyStay Fiji's servers.

PCI-DSS Compliance: MyStay Fiji is PCI-DSS compliant by not handling card data (SAQ-A compliance). Nuitée handles all payment processing in compliance with PCI-DSS requirements.

If you have concerns about payment security, please contact Nuitée at vip.support@nuitee.com or review Stripe's privacy and security policies at stripe.com/privacy.

6. Cookies and Tracking Technologies

MyStay Fiji uses cookies for:

  • Session management and keeping you logged in
  • Remembering your preferences (currency selection, language)
  • Understanding how you use the Platform
  • Improving Platform functionality and user experience
  • Analyzing traffic and usage patterns

Nuitée may use cookies for: Booking process, payment security, and booking-related functionality. Please refer to Nuitée's Privacy Policy for details on their cookie usage.

Types of Cookies We Use:

  • Essential Cookies: Required for Platform functionality (e.g., session management)
  • Performance Cookies: Help us understand usage patterns
  • Functional Cookies: Remember your preferences

You can control cookie settings through your browser. However, disabling cookies may limit your ability to use certain features of the Platform.

7. Your Rights and Choices

Under the GDPR, you have rights in relation to your personal data:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Objection: Object to the processing of your personal information
  • Portability: Request transfer of your data to another service
  • Withdraw Consent: Withdraw consent for data processing at any time

For account data and booking data stored by MyStay Fiji: Contact support@mystayfiji.com to exercise your rights regarding account authentication data and booking data stored in our database.

For booking data processed by Nuitée: Contact vip.support@nuitee.com or contact@nuitee.com to exercise your rights regarding booking data processed by Nuitée. These rights are subject to Nuitée's Privacy Policy and GDPR rights.

To exercise these rights for account data we collect, please contact us at support@mystayfiji.com

8. Third-Party Websites and Services

MyStay Fiji uses Nuitée Travel Limited as our booking technology provider. When you make a booking, you are entering into a contract with Nuitée, not MyStay Fiji. Your booking data is subject to:

  • Nuitée's Privacy Policy
  • Nuitée's Terms and Conditions
  • Stripe's Privacy Policy (payment processing)

We are not responsible for the privacy practices or content of these external services. We strongly encourage you to review the privacy policies of Nuitée Travel Limited and any accommodation providers you book with.

9. Children's Privacy

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 18, please contact us immediately at privacy@mystayfiji.com, and we will take steps to delete such information.

10. Data Retention

MyStay Fiji: We retain account data while your account is active, and delete it upon request (subject to legal obligations). Booking data stored in our database is retained for platform functionality and may be retained for legal, tax, and accounting purposes (typically 7 years from booking date). Usage data is typically retained for up to 2 years for analytics purposes.

Nuitée: Nuitée retains booking data for as long as necessary to fulfill the purposes they collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Booking data is typically retained for 7 years from booking date for legal, tax, and accounting purposes. Please refer to Nuitée's Privacy Policy for details.

You can request deletion of your personal information at any time, subject to legal obligations to retain certain records.

11. International Data Transfers

Your account data may be transferred to and processed in countries other than Fiji, including countries where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Your booking data is processed by Nuitée, which is based in Ireland (EU GDPR compliant). When you make a booking, your data may be processed internationally by Nuitée, Stripe, and accommodation providers according to their respective privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

MyStay Fiji - Account and Website Inquiries

Email: privacy@mystayfiji.com

General Support: support@mystayfiji.com

Nuitée Travel Limited - Booking Data Inquiries

4 Waterloo Rd, Ballsbridge, Dublin, D04 A0X3, Ireland

Email: vip.support@nuitee.com

Email: contact@nuitee.com

For payment data inquiries, please contact Nuitée directly. For booking data inquiries, please contact Nuitée at the above email addresses.

Acknowledgment: By using mystayfiji.com, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You understand that MyStay Fiji stores booking data in our database for platform functionality (displaying bookings, sending emails, managing access), while Nuitée Travel Limited processes all bookings, handles payment processing, and provides customer support. Your booking contract is with Nuitée, not MyStay Fiji. Payment card information is never stored by MyStay Fiji - it is handled entirely by Nuitée via Stripe. You have read both this Privacy Policy and Nuitée's Privacy Policy.