Privacy Policy

Raha Resort is a small family-run hotel in Jericho, Palestine (West Bank). We are the controller of the personal information described in this policy. You can reach us at [reservations@raharesort.com] or [+970 …].

We collect only what we need to take a booking, host your stay, and run our website. The categories of information are:

• Booking and guest details: name, contact details, travel dates, number of guests, room preferences, special requests, and ID details where required by local hospitality regulations at check-in.
• Payment information: processed by our payment partner. We do not store full card numbers on our own systems.
• Communications: emails, calls, and messages exchanged with our reservations or front office team.
• Marketing: email address and preferences if you sign up for updates.
• Website usage: basic technical data such as IP address, device and browser type, referring page, and pages viewed, collected through server logs and privacy-friendly analytics.

We use your information to:

• Take, confirm, and manage your reservation.
• Communicate with you before, during, and after your stay, including service messages and follow-up.
• Process payments and prevent fraud.
• Comply with legal duties such as guest registration, tax records, and lawful requests from authorities.
• Improve the website and our services through aggregated analytics.
• Send marketing emails where you have opted in. You can withdraw consent at any time.

Where data protection law (including GDPR-style frameworks) applies, we rely on the following bases:

• Contract: to take and perform your reservation and related services.
• Legal obligation: to keep records required by hospitality, tax, and law enforcement rules.
• Legitimate interests: to operate our website securely, prevent fraud, and improve our services, balanced against your rights.
• Consent: for marketing emails and any non-essential cookies. You can withdraw this consent at any time.

We do not sell your personal information. We share limited data only with parties that help us run the resort and the website:

• Payment processors that handle card transactions.
• Our property management system and reservation tools used by the front office.
• Email and communications providers.
• Our website hosting provider, Vercel.
• Professional advisors such as accountants and legal counsel, where required.
• Public authorities where disclosure is required by law or to protect the safety of guests and staff.

Some of our service providers are located outside Palestine, including in the European Union and the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the providers' standard contractual terms and their own compliance frameworks. Details of specific transfers are available on request: [Specific transfer mechanisms: …].

We keep personal information only for as long as we need it. Typical periods are:

• Reservation and stay records: kept for the period required by local hospitality and tax law: [Local retention period: …].
• Accounting and invoicing records: kept for the period required by tax law.
• Marketing data: kept until you unsubscribe or ask us to delete it.
• Website logs and analytics: short retention windows, typically a few months.

The website uses a small number of cookies and similar technologies. You can read what we use and manage your choices on our Cookie Preferences page.

Depending on where you live, you may have the following rights over your personal information:

• Access to the data we hold about you.
• Correction of inaccurate or incomplete data.
• Erasure of your data, where applicable.
• Restriction or objection to certain processing.
• Portability of data you provided to us.
• Withdrawal of consent at any time, without affecting prior lawful processing.
• The right to lodge a complaint with a competent data protection authority.

To exercise any of these rights, contact us at [reservations@raharesort.com]. We may need to verify your identity before responding.

We use reasonable technical and organizational measures to protect personal information against loss, misuse, and unauthorized access. No system is fully secure, so we also rely on careful staff practices and trusted partners.

The website is not directed at children. Bookings are made by adults. Where children stay with their families, the booking adult provides the relevant information on their behalf.

We may update this policy from time to time. The date at the bottom of the page shows when it was last revised. Material changes will be highlighted on the website.

For privacy questions or to exercise your rights, contact us at [reservations@raharesort.com] or write to [Raha Resort, …, Jericho, Palestine].