Privacy policy
Updated October 31, 2026
What we collect when you book with Slow Days, why, who gets it, and how to see it or have it deleted.
Who we are
This site is run by Slow Days, who is responsible for the information collected here.
For questions about your information, reach us on WhatsApp at +639611845396, or by replying to any email from us.
What we collect
- When you send a request: your name, email, phone number, dates, number of guests, whether you want an extra mattress, the site language, and anything you write in the note.
- When you pay: the amount, the date and how you paid. For card payments you type your card details on a Stripe page. This site never sees or stores your card number.
- To stop spam: a shortened hash of your IP address. We don’t keep the address itself in our own records.
- When you write to us: whatever you send on WhatsApp or by email.
We don't ask for your passport, date of birth, home address or medical details. There's no need to put medical details in the note either.
Why, and for how long
Request and booking details
- Why:
- To handle your request, email you updates, arrange your arrival and host you.
- Legal basis:
- Doing what you asked us to do.
- How long:
- There's no fixed deletion date: we keep these details, and you can ask us on WhatsApp to delete them. We do the deletion by hand.
Your note
- Why:
- Special requests. Only managers can read it.
- Legal basis:
- Doing what you asked us to do.
- How long:
- With the booking.
Payments and refunds
- Why:
- To manage the money and keep accounting records.
- Legal basis:
- Carrying out your booking, and the duty to keep records.
- How long:
- There’s no fixed deletion date. Payment records are not deleted with your booking details.
Emails we sent you
- Why:
- To send booking updates and know they went out.
- Legal basis:
- Doing what you asked us to do.
- How long:
- With the booking.
IP hash
- Why:
- To limit how many requests come from one source and stop spam.
- Legal basis:
- Legitimate interest: protecting the site.
- How long:
- In our activity log, with no fixed deletion date.
Staff messages to our Telegram bot
- Why:
- Staff use it to record expenses, bookings and repairs, and to ask who is arriving. A message may include a guest’s name or phone number.
- Legal basis:
- Legitimate interest: running the apartments.
- How long:
- We erase the text after 30 days. What it recorded, such as a booking, stays. On Telegram itself, Telegram’s rules apply.
Who gets your information
We don't sell your information or use it for advertising.
Within our team, managers see all booking details. In the system, cleaning staff see only dates, the number of guests and any extra mattress, not your name, phone, email, note or any amounts.
Companies that work for us:
- Vercel: hosts the site, in Singapore. Every request to the site passes through it, and its server logs include IP addresses.
- Supabase: our database, in Singapore. It stores your request, booking and payment details.
- Stripe: card payments. It receives your email, the amount, the apartment name and the booking code, and takes your card details from you directly.
- Google (Gmail): the emails we send and receive, which include your name, email address, booking details and anything you write to us.
- Telegram: runs the staff bot. Staff messages and the bot’s replies pass through it, and these can include a guest’s name and phone number.
- Anthropic: AI that reads what staff send the bot, including photos such as receipts. Guests never write to it directly, but a staff message may include a guest’s name or phone number.
- Groq: transcribes staff voice messages to the bot. These may include a guest’s name or phone number.
- Browser notification services (Google, Apple, Mozilla): alert managers to a request or payment, with the apartment, dates, amount and booking code but no guest name.
- WhatsApp: when you write to us there, and when we message the phone number you gave us about your booking, arrival or a payment.
Some of these companies are based in the United States or work across several countries, so your information may reach a country other than your own.
Your booking link
Your booking page opens with a private link we send you. Anyone with that link can see the booking, pay or cancel, so it’s best not to pass it on.
Your rights
You can ask to see your information, correct it, delete it, or object to how we use it.
Reach us on WhatsApp at +639611845396, or by replying to any email from us. We’ll confirm it’s you from your booking details and reply within 30 days.
Deleting your details doesn’t cover payment records we need to keep. Deleted information may stay for a short time in database backups.
You can also complain to the data protection authority in your country.
Changes to this page
When this page changes, the date at the top changes with it.