Privacy Policy

Last Updated: December 1, 2025

Introduction

Velocci UK LTD(“we", "our", or "us"), the owner and operator of the LocalStays platform, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. This policy complies with the General Data Protection Regulation (GDPR), Serbian Law on Personal Data Protection, Montenegrin Law on Personal Data Protection, and other applicable regional data protection laws.

Data Controller

Velocci UK LTD, through the LocalStays platform, acts as the data controller for the personal data collected through our platform. For any questions, concerns, or requests regarding your personal data, please contact us at privacy@localstays.me.

What Information We Collect

We collect the following types of personal information:

Information You Provide:

• Name
• Email address
• Your correspondance and billing address
• Addresses of properties you list to advertise
• Copies of your ID documents
• Videos or images of you during ID verification
• Role/Type (Individual, Agency, or Hotel)
• Any other information you voluntarily provide when contacting us

Information Collected Automatically:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Referring website addresses
• General location data (country level)

Collection of Identity Documents, Verification Images, and Property Documents

To protect the integrity of the LocalStays platform and ensure a safe and trustworthy environment, we may request and process the following additional information from users who wish to create listings or otherwise verify their identity:

• Copies of government-issued identification documents, such as passports, national ID cards, or driving licences.
• Photographs or video recordings, including verification selfies or short videos confirming identity during sign-up or during account checks.
• Documents related to property ownership or authorisation, such as proof of ownership, land registry extracts, lease agreements, or written authorisation to advertise the property.

Purpose of Processing

We process this information strictly for the following purposes:

• To verify your identity and prevent fraud
• To confirm your legal right to advertise or manage a property listed on LocalStays
• To ensure the security and integrity of the platform
• To comply with legal obligations and support law-enforcement requests where applicable

We do not use identity documents, verification images, or property-related documents for any purpose unrelated to fraud prevention, identity verification, or regulatory compliance.

Legal Basis for Processing

The legal bases for processing this information include:

• Legitimate interests (GDPR Art. 6(1)(f)) — verifying user identity, preventing fraud, and ensuring platform safety
• Compliance with legal obligations (GDPR Art. 6(1)(c))
• Your explicit consent, where required (GDPR Art. 9(2)(a)) — for biometric data used solely for identification

Sharing with Trusted Third Parties

We may share ID documents, verification images, and property-related documents with trusted third-party identity-verification providers solely for the purposes listed above. These partners are contractually required to process your information securely and only for verification and fraud-prevention purposes.

We do not sell or disclose these documents to unauthorised parties.

Storage and Retention

Identity and property documents are stored securely with restricted access and are retained only for as long as necessary to complete verification, comply with legal obligations, or maintain the security and integrity of the platform.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for website functionality and security (reCAPTCHA, form submission, cookie consent)
• Analytics Cookies (Optional): Google Analytics to understand how visitors use our website. Only activated with your consent.

You can control cookie settings through our cookie banner and your browser preferences. You can withdraw consent at any time by clearing your cookies. Essential cookies cannot be disabled as they are necessary for the website to function.

Your Rights

Under GDPR, Serbian, Montenegrin, and other applicable regional data protection laws, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@localstays.me. We will respond to your request within 30 days as required by law.

Additional Rights Under Regional Laws

Serbian Data Protection:

Under Serbian Law on Personal Data Protection, you have the right to be informed about data processing, access your data, correct inaccuracies, and file complaints with the Commissioner for Information of Public Importance and Personal Data Protection.

Montenegrin Data Protection:

Under Montenegrin Law on Personal Data Protection, you have rights similar to GDPR, including the right to be informed, access, rectification, erasure, and to lodge complaints with the Agency for Personal Data Protection and Free Access to Information.

Other Balkan Region Rights:

We respect and comply with all applicable data protection laws in the Balkan region, including Bosnia and Herzegovina, Croatia, North Macedonia, and Albania.

Data Protection Authority Contacts

If you believe your rights have been violated, you may contact your local data protection authority:

• Serbia: Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs)
• Montenegro: Agency for Personal Data Protection and Free Access to Information (www.azlp.me)
• EU: Your national data protection authority or the European Data Protection Board (www.edpb.europa.eu)

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:

Email: privacy@localstays.me

We will respond to all legitimate requests within 30 days as required by applicable law.