Legal

Privacy Policy

Last updated: June 2026

Kensington Holiday Homes (“Kensington”, “we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect when you use kensingtonhomes.ae or book a stay with us, how we use and share it, and the rights you have. It is written to meet the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and, for visitors in the UK and European Economic Area, the UK GDPR and EU GDPR.

Who we are

Kensington Holiday Homes is a Dubai-based holiday-home management company and the controller of the personal data described in this policy. For any privacy question or to exercise your rights, contact us at info@kensingtonhomes.ae or by post at Al Diyar, Al Wasl, Dubai, United Arab Emirates.

The data we collect

Identity and contact details — your name, email address, phone number and postal address.
Booking details — the property, stay dates, number of guests, the price paid and your order reference.
Payment information — card payments are processed on Etisalat’s (Comtrust) secure hosted page. We never see or store your full card number; we receive only a transaction reference and the payment result.
Communications — messages you send us and our correspondence with you.
Technical and usage data — IP address, device and browser information, and analytics about how you use the site. Non-essential analytics and advertising data are collected only with your consent.

How and why we use your data

To take and manage your booking, including confirming availability and creating your reservation in our property-management system (Guesty).
To process your payment through the Etisalat payment gateway.
To send booking confirmations, pre-arrival information and service messages by email.
To provide customer support and respond to your enquiries.
To meet legal and tax obligations, including UAE Tourism Dirham and VAT requirements.
To protect against fraud and keep the site and bookings secure.
With your consent, to measure marketing performance and show relevant advertising via analytics and advertising platforms.

Legal bases for processing

Under the GDPR we rely on: performance of our contract with you (to take and deliver your booking); your consent (for marketing and non-essential cookies, which you can withdraw at any time); our legitimate interests (to secure and improve our services); and compliance with legal obligations (tax and record-keeping). Under the PDPL we process your data on the basis of your consent, the necessity of performing our contract with you, and compliance with our legal obligations.

Who we share data with

We share personal data only with service providers who help us run the booking and the site, each bound to protect it:

Guesty — our property-management system, which holds the reservation and guest record.
Etisalat / Comtrust — our payment gateway, which processes your card payment.
Resend — our email provider, used to send booking and service emails.
Hosting and infrastructure providers (e.g. Vercel) that run our website and booking services.
Analytics and advertising platforms (e.g. Google, Meta, TikTok) — only where you have given consent.

Our content system (Sanity) and pricing provider (PriceLabs) do not receive your guest personal data. We do not sell your personal data.

International transfers

Some of our providers process data outside the UAE, the UK or the EEA. Where we transfer personal data internationally, we put appropriate safeguards in place — such as standard contractual clauses, transfers to countries with an adequate level of protection, or your explicit consent — as required by the PDPL and GDPR.

Cookies and tracking

We use essential cookies to make the site and booking work. Analytics and advertising cookies and tags are loaded only after you accept them via our consent banner (we use Google Consent Mode v2). You can decline non-essential cookies and still browse the site and complete a booking, and you can change your choice at any time.

How long we keep your data

We keep your booking and payment-reconciliation records for as long as needed to provide the service and to meet our legal, accounting and tax obligations (generally up to the statutory retention period under UAE law), after which we delete or anonymise them. Marketing data is kept until you withdraw consent.

Your rights

Subject to the PDPL and, where applicable, the GDPR, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
request deletion of your data;
restrict or object to our processing, and stop processing for direct marketing;
request portability of data you provided to us;
withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email info@kensingtonhomes.ae. We will respond within the timeframes required by law.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and a hosted payment flow so that card details are entered on Etisalat’s secure page and never pass through our own servers.

Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18.

Complaints

If you have a concern, please contact us first at info@kensingtonhomes.ae. You also have the right to lodge a complaint with the UAE Data Office, or — if you are in the UK or EEA — with your local data protection authority (for example, the UK Information Commissioner’s Office).

Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it last changed; significant changes will be highlighted on this page.

Contact us

Kensington Holiday Homes — Al Diyar, Al Wasl, Dubai, United Arab Emirates. Email: info@kensingtonhomes.ae. Phone: +(971) 50 512 7694.