Last updated: October 2026.
This policy explains how ORIA Stays collects and uses your personal data when you visit oriastays.com, book a stay or join the ORIA Guest Club.
Data controller
SCI FM, operating the ORIA Stays brand — 1 Cours du Havre, 75008 Paris, France. Contact: [email protected].
Data collected
- Bookings: surname, first name, contact details (email, phone, address), dates and details of your stay, number of guests, our exchanges. Payment is processed directly by our secure payment provider: we do not store your bank details.
- Bookings via a platform (Airbnb, Booking.com, Abritel/Vrbo): the information the platform sends us to organise your stay.
- ORIA Guest Club: first name, email address and, if you provide it, WhatsApp number, as well as your consent.
- Browsing: technical data and cookies, according to your choices in the cookie banner.
Purposes and legal bases
- Managing your booking, your stay and our exchanges — performance of the contract.
- Complying with our legal obligations (accounting, tourist tax) — legal obligation.
- Sending you our offers and news by email and/or WhatsApp — only with your consent, which can be withdrawn at any time.
- Ensuring the security and proper functioning of the website — legitimate interest.
Recipients
Your data is intended for ORIA Stays and its technical service providers, within the limits of their tasks: Lodgify (website and booking management), Brevo (forms, emails and messages), Meta (WhatsApp, if you give us your number), our payment provider and, where applicable, the platform through which you booked. We never sell your data.
Retention period
- Booking data: for the duration of the business relationship, then for the period required by our legal obligations (up to 10 years for accounting records).
- Guest Club: until you unsubscribe, and at most 3 years after our last contact.
- Cookies: 13 months maximum.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time. To exercise these rights, write to us at [email protected].
To unsubscribe from the Guest Club: click the unsubscribe link in any email, or reply STOP on WhatsApp.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Transfers outside the European Union
Some providers (notably Meta for WhatsApp) may process data outside the European Union. These transfers are governed by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses).