Privacy Policy
Effective date: 3 October 2026 · Last updated: 3 October 2026
1. Scope and Who We Are
This Privacy Policy explains how LOKNDA ("LOKNDA", "we", "us", "our") collects, uses, stores, shares, protects and otherwise processes personal data when you visit or use our website, mobile experiences, guest portal, owner portal, booking services, customer support, WhatsApp or other communications, stay at a property managed or marketed by LOKNDA, submit a property-owner enquiry, or otherwise interact with us. It applies to website visitors, prospective and confirmed guests, accompanying guests where applicable, account users, property owners and prospective owners, authorized representatives, vendors/contractors where relevant, and persons who contact us.
For purposes of applicable data-protection law, the identity and role of the data controller or processor may depend on the service and booking channel. Where LOKNDA determines the purposes and means of processing, LOKNDA acts as controller; where we process data solely on documented instructions of another lawful controller, we may act as processor.
2. Personal Data We May Collect
We may collect: identity data (full name, nationality, date of birth where required, government ID/passport details and verification images where lawfully required); contact data (email, mobile number, country code, address); booking/stay data (property, dates, guests, booking source, preferences, special requests, arrival/departure details, stay history and incident/support records); account data (login identifiers, account settings and saved preferences); payment and transaction data (amount, currency, status, refunds, chargebacks, billing details and payment tokens/references—full card details are generally handled by payment providers rather than stored by LOKNDA); communications (calls where lawfully recorded, emails, WhatsApp/chat messages, support tickets, surveys, reviews and complaints); owner data (contact, property, ownership/authority, contract, bank/settlement and tax-related information where needed); and security/operational records (access logs, smart-lock events, incident records and lawful CCTV relating to managed premises where applicable).
We may also collect technical and usage data such as IP address, device and browser type, operating system, language, approximate location derived from IP, cookie or similar identifiers, mobile/device advertising identifiers where enabled, referring URL, landing page, pages viewed, searches, filters, clicks, session duration, booking-funnel events, error/crash data and interaction with emails or campaigns.
3. How We Collect Data
We collect data directly from you; automatically from your use of our digital services; from the person who makes a booking that includes you; from property owners or their authorized representatives; from online travel agencies and booking platforms such as Airbnb and Booking.com; from payment, identity-verification, fraud-prevention, PMS, CRM, communications and support providers; from social-login providers if you choose that feature; and from other sources where receipt and use are lawful.
4. Why We Use Personal Data
We may process personal data to search and display availability; create, confirm, modify and administer reservations; identify and register guests; provide check-in/access and guest support; process payments, deposits where applicable, refunds and financial reconciliation; manage extensions, cancellations, no-shows, damage and incident claims; communicate service and safety information; manage owner leads, onboarding, properties, reporting and settlements; personalize the guest experience; prevent fraud, abuse, unauthorized resale and chargebacks; protect guests, owners, properties, staff and our legal rights; maintain security; comply with legal, regulatory, tax, accounting, police/security or other competent-authority requirements; establish, exercise or defend legal claims; improve products, operations and service quality; conduct analytics and performance measurement; and send marketing where permitted.
5. Lawful Bases and Consent
Depending on the activity and applicable law, processing may be necessary to perform or take steps toward a contract; comply with a legal obligation; protect legitimate interests such as fraud prevention, property protection, service security, operations and legal claims; protect vital interests in emergencies; or rely on consent where consent is legally required. Where processing is based on consent, you may withdraw it subject to law; withdrawal does not invalidate processing already lawfully carried out.
6. Guest Identity Documents & Verification
LOKNDA may request identity documents and information where reasonably necessary and lawful for identity verification, guest registration, building/compound access, fraud/chargeback prevention, safety, protection of property or compliance with competent authorities. Access to identity documents is restricted to authorized persons and providers with a legitimate operational need. We do not use identity documents for unrelated advertising. Copies are retained only for the period required or permitted for the relevant purpose and applicable obligations.
7. Payment Information
Payments may be processed by third-party payment gateways, banks, card networks, wallets, BNPL providers or booking platforms. LOKNDA may receive transaction identifiers, payment status, limited card metadata, billing information and fraud signals, but we aim not to store full payment-card credentials on LOKNDA systems. The payment provider's own privacy terms also apply to its processing.
8. Cookies, Pixels, Analytics & Advertising
We may use strictly necessary cookies and, subject to applicable consent requirements, analytics, preference and advertising technologies such as cookies, pixels, tags, SDKs and similar identifiers. These technologies may measure traffic, attribution, conversions and booking-funnel activity; remember preferences; detect fraud; improve performance; and personalize or measure advertising. Depending on LOKNDA's live technology stack, providers may include analytics, advertising and tag-management platforms such as Google and Meta and other approved providers. Non-essential tracking will be managed through the consent choices required by applicable law. See the separate Cookie Policy for current categories and controls.
9. Marketing, CRM, WhatsApp, Email, SMS & Push
We distinguish essential booking/service communications from promotional marketing. We may send confirmations, access instructions, payment/service notices, safety messages and support communications as necessary for the service. Promotional email, SMS, WhatsApp or push communications are sent only where we have the lawful basis/consent required. You may opt out of marketing using the unsubscribe mechanism or by contacting us; opting out of marketing does not stop necessary transactional/service communications. We may record marketing source, campaign and consent status for compliance and attribution.
10. Personalization, Profiling & Automated Processing
We may use booking, browsing, preference, location-at-city/country level, campaign and interaction data to segment audiences, personalize content or offers, rank/search properties, detect fraud and improve operations. Where applicable law gives you rights regarding solely automated decisions that produce legal or similarly significant effects, LOKNDA will honor those rights. We do not intentionally make high-impact decisions about you solely from sensitive personal data for advertising.
12. No Sale of Personal Data
LOKNDA does not sell databases of identifiable personal data for money. If a future advertising or data-sharing practice is treated as a 'sale' or 'sharing' under an applicable privacy law, LOKNDA will provide any notice and choice that law requires before or in connection with that practice.
13. International Data Transfers
Some service providers or booking platforms may process or store data outside Egypt. Where an international transfer is subject to legal restrictions, LOKNDA will use the approvals, contractual safeguards, adequacy mechanisms, consent or other lawful transfer mechanism required by applicable law. We assess providers based on the nature of the data, service and available safeguards.
14. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose collected and to meet legal, tax, accounting, security, fraud-prevention, contractual and dispute requirements. Retention varies by category. Reservation and transaction records may be retained for the period necessary to administer the stay and satisfy legal/accounting or limitation requirements; identity copies are retained only for the legally/operationally justified period; support and incident evidence may be retained through the relevant claim/dispute period; marketing data is retained until opt-out or until no longer needed; technical logs are retained according to security and operational schedules. Data is then deleted, securely destroyed or anonymized unless a lawful hold applies.
15. Data Security
LOKNDA uses reasonable administrative, technical and physical safeguards appropriate to the nature of the data and risk, which may include encryption in transit, access controls, role-based permissions, multi-factor authentication for privileged systems, logging, secure credential practices, vendor controls, backups, vulnerability management and incident response. No internet or storage system can be guaranteed completely secure; accordingly, we cannot promise absolute security.
16. Data Breaches and Incident Response
If a personal-data incident occurs, LOKNDA will investigate, contain and remediate it and will make notifications to affected individuals or competent authorities where and within the time required by applicable law. We may preserve relevant evidence and logs for investigation, security and legal purposes.
17. Your Privacy Rights
Subject to applicable law and verification of your identity, you may have rights to know whether we process your data; access or obtain information/copies; correct inaccurate or incomplete data; request deletion where legally available; object to or restrict certain processing; withdraw consent; opt out of direct marketing; and exercise other rights granted by applicable data-protection law. Some requests may be refused or limited where retention/processing is required for legal obligations, fraud/security, contractual records, the rights of others or the establishment, exercise or defense of legal claims. We will not discriminate against you for lawfully exercising privacy rights.
18. Requests, Identity Verification & Authorized Representatives
To protect personal data, we may verify identity before acting on a privacy request and may request information reasonably necessary to match the requester to our records. Where law permits an authorized representative to act for you, we may verify that authority. We will respond within the period required by applicable law and may extend or decline a request only where law permits.
19. Children and Minors
Our booking services are intended for adults legally capable of making a reservation. We do not knowingly invite minors to create independent booking accounts. Information about children or minors may nevertheless be processed when they are accompanying registered guests and the information is necessary for the reservation, safety or a legal requirement. Such data should be supplied by or with the authority of a parent, guardian or responsible adult as applicable.
20. CCTV, Access Systems & Property Security
Managed buildings or common areas may use lawful CCTV, security desks, gate systems, smart locks or access logs operated by LOKNDA, owners, compounds or third parties. LOKNDA does not intentionally place surveillance cameras in private interior areas where guests reasonably expect privacy. Where LOKNDA controls such systems, data is used for security, access, incident investigation, fraud prevention and protection of persons/property and is retained only as justified. Property-specific disclosures will be made where required.
21. Location Data
We may process approximate location inferred from IP for security, localization, analytics and fraud prevention. Precise device location is collected only if a feature requires it and the device/user provides the required permission, for example an expressly enabled nearby-service, check-in or operational feature. You can manage device permissions through your device settings.
22. Reviews, User Content & Public Information
If you submit a review, testimonial, photograph or other content for publication, we process the content and related account/booking information to moderate, verify and publish it as permitted. We will obtain any consent required before using identifiable guest content for unrelated promotional advertising. Content you publish directly on a public third-party platform is also subject to that platform's privacy rules.
23. Third-Party Websites, OTAs & Social Platforms
Our services may link to or integrate with third-party websites, OTAs, maps, social networks, payment services or applications. Their processing is governed by their own privacy notices when they act independently. LOKNDA is not responsible for independent third-party privacy practices, but we remain responsible for our own processing and for selecting processors as required by law.
24. Property Owners and Owner Leads
For owners and prospective owners, we may process identity/contact data, property address and characteristics, ownership/authority documentation where needed, communications, inspection/assessment data, contracts, listing information, performance reports, bank/settlement details and tax/invoice information. We use this to evaluate properties, prepare proposals, onboard/manage listings, operate reservations, report performance, settle funds, provide owner support and comply with legal/financial obligations.
25. Business Transfers and Corporate Transactions
If LOKNDA undergoes or considers a merger, investment, financing, restructuring, acquisition, sale or transfer of all or part of its business or assets, relevant personal data may be disclosed under appropriate confidentiality and due-diligence controls and transferred as part of the transaction where lawful. The recipient will be required to handle personal data consistently with applicable law.
26. Anonymized and Aggregated Data
We may create aggregated or anonymized information that no longer reasonably identifies an individual and use it for analytics, forecasting, service improvement, benchmarking and business planning. Where data is truly anonymized, it is not treated as personal data to the extent provided by applicable law.
27. Data Accuracy and Your Responsibilities
You should provide accurate, complete and current information and update material changes. If you provide personal data about another person, including an accompanying guest, you must have a lawful basis/authority to provide it and, where required, make this Policy available to that person. Do not send us more sensitive information than is reasonably necessary for the service.
28. Do Not Send Sensitive Credentials
LOKNDA will never ask you to send full card PINs, one-time banking passwords, account passwords or other secret authentication credentials through ordinary chat, email or WhatsApp. If you receive such a request purporting to be from LOKNDA, do not provide the information and contact official support.
29. Changes to This Privacy Policy
We may update this Policy to reflect changes in law, technology, providers, services or operations. The current version and effective/last-updated date will be published on our website. Where required by law or where a change materially affects your rights, we will provide additional notice or obtain consent as required.
30. Contact and Privacy Requests
For questions, complaints, privacy-right requests or withdrawal of marketing consent, contact LOKNDA through the official contact details published on the LOKNDA website or within your booking/account. Where LOKNDA appoints a Data Protection Officer or dedicated privacy contact, that contact will also be published here. We may ask you to verify identity before disclosing or changing personal data.
31. Governing Privacy Framework
LOKNDA processes personal data in accordance with applicable Egyptian data-protection and other mandatory laws, together with any additional privacy rules that lawfully apply to a particular individual, transaction or processing activity. Nothing in this Policy limits rights that cannot legally be waived.