Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to all services provided by Pamper Homes LLC ("Pamper Homes," "we," "our," or "us"), including:

• Our website at pamperhomes.com and associated property pages
• Our roommate matching platform for student housing
• Mobile applications, including the Pamper Homes Spa Controller app used at our vacation rental properties
• Any other services, features, or content we offer

We are committed to protecting your privacy and complying with applicable data protection laws, including the California Consumer Privacy Act (CCPA/CPRA) and the European General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information from the following sources:

Information You Provide

• Account information: Name, email address, phone number, and profile photo when you create an account or sign in with Google, Facebook, or Apple
• Booking information: Dates of stay, number of guests, payment details, and special requests
• Roommate matching profiles: Preferences, lifestyle information, and bio details you choose to share
• Communications: Messages you send to us or other users through our platform
• Rental applications: Background check consent, employment information, and references

Information Collected Automatically

• Device information: IP address, browser type, operating system, and device identifiers
• Usage data: Pages visited, features used, and time spent on our services
• Location data: General location based on IP address (we do not collect precise GPS location from the website)
• Cookies and similar technologies: See our Cookie Policy section below

Spa Controller App Data

If you use our Spa Controller app at properties like Villa Biscayne, we collect:

• Device identifiers to connect to the spa control system
• Temperature and timing preferences you set
• App usage logs for troubleshooting and improving the service

This data is used solely to operate the spa control feature and is not shared with third parties for marketing purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process bookings, payments, and rental applications
• Facilitate roommate matching and connections between users
• Communicate with you about your reservations and account
• Send promotional communications (with your consent)
• Detect, prevent, and respond to fraud or security issues
• Comply with legal obligations
• Analyze usage patterns to improve our services

4. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential cookies: Required for the website to function (session management, security)
• Analytics cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing cookies: Used to deliver relevant advertisements (Facebook Pixel, Google Ads)

You can manage cookie preferences through your browser settings. We honor Global Privacy Control (GPC) signals and other opt-out preference signals as required by law.

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Other users: For roommate matching (with your explicit consent) or to facilitate bookings
• Service providers: Companies that help us operate our business, including:
  • Payment processors (Stripe)
  • Email service providers (Resend)
  • Cloud hosting (Vercel, Firebase)
  • Analytics providers (Google Analytics)
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

All Users

• Access and receive a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected
• Right to delete: Request deletion of your personal information, subject to certain exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt out of sale/sharing: We do not sell personal information or share it for cross-context behavioral advertising
• Right to limit use of sensitive personal information: Request that we limit use of sensitive personal information to what is necessary
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

We honor opt-out preference signals including Global Privacy Control (GPC). When we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information.

European Residents (GDPR)

If you are in the European Economic Area, you have additional rights:

• Right to portability: Receive your data in a structured, machine-readable format
• Right to restriction: Request restriction of processing in certain circumstances
• Right to object: Object to processing based on legitimate interests
• Right to lodge a complaint: File a complaint with your local data protection authority

Our legal bases for processing include: performance of a contract (bookings), legitimate interests (improving our services), compliance with legal obligations, and your consent.

7. Automated Decision-Making

We may use automated processes to help match roommates based on compatibility criteria you provide. These recommendations are suggestions only and do not make binding decisions about your housing. You can contact us to request human review of any automated recommendations.

8. Data Retention

We retain your personal information as follows:

• Account data: For as long as your account is active, plus 3 years after deletion request for legal compliance
• Booking records: 7 years for tax and legal purposes
• Analytics data: 26 months (anonymized data may be retained longer)
• Spa controller logs: 90 days
• Marketing preferences: Until you withdraw consent

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through OAuth 2.0 providers
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. For transfers from the EEA, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection of your data.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Last updated" date. For significant changes, we may also send you an email notification.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or want to file a complaint, please contact us:

For data deletion requests, you may also use our data deletion request form.

We will respond to your request within 45 days (CCPA) or 30 days (GDPR) of receiving it. If we need additional time, we will notify you.