Privacy Policy

Last updated: June 12, 2026. This policy explains what data we collect, how we use it, and your rights.

Data Controller

The controller of your personal data is Beauxbatons LLC, 32 N Gould St, Sheridan, WY, 82801, United States (“PawRent”, “we”).

For any questions about how we process your data, contact us at: support@pawrentbalkans.com

1. Data We Collect

Data you provide directly: name, email address, password (stored hashed), phone number (optional), listing photos, descriptions, and prices.

Automatically generated data: IP address, device and browser type, pages visited on the platform, date and time of visits.

Subscription data: your selected plan and subscription date. Payment card details are not stored by us — they are processed by Stripe and PayPal in accordance with PCI DSS.

2. How We Use Your Data

We process your data only where we have a legal basis to do so:

Performance of a contract — creating and managing your account, publishing listings, enabling communication between hosts and guests, processing subscriptions, and sending transactional emails (confirmations, status updates, support).

Legitimate interest — platform security, fraud detection and prevention, abuse limitation, and basic internal analytics to improve the service. We always balance our interest against your rights and freedoms.

Consent — sending marketing communications, if you explicitly opt in. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Legal obligation — retaining financial and tax records for the periods required by law.

We do not sell your data to third parties.

3. Third-Party Services

Supabase — database and authentication (EU-based servers).

Stripe — payment processing.

PayPal — payment processing.

Resend — transactional email delivery.

Cloudinary — photo storage and delivery.

Each provider has its own privacy policy and security standards.

4. International Data Transfers

Our database (Supabase) is hosted on servers in the European Union. Some of our service providers (Stripe, PayPal, Cloudinary, Resend) process data in the United States. Such transfers are carried out in compliance with the GDPR, on the basis of the providers' EU-U.S. Data Privacy Framework certification or Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Data Retention

We retain your data while your account is active. If you request account deletion, we delete your personal data within 30 days, except data we are legally required to retain (e.g., financial records).

6. Your Rights

You have the following rights regarding your personal data:

Access — request a copy of the data we hold about you.

Rectification — update inaccurate data through your account settings or by contacting us.

Erasure — request deletion of your account and data.

Portability — request your data in a machine-readable format.

Objection — object to processing based on legitimate interest.

Restriction of processing — request that processing be temporarily restricted, for example while your objection or rectification request is being resolved.

Withdrawal of consent — withdraw any consent given for marketing at any time.

To exercise these rights, contact us at support@pawrentbalkans.com. We respond within 30 days at the latest.

If you believe our processing of your data violates applicable law, you have the right to lodge a complaint with the data protection authority in your country — for example, the Croatian Personal Data Protection Agency (AZOP) or the Serbian Commissioner for Information of Public Importance and Personal Data Protection.

7. Cookies

We use only functional cookies necessary for the platform to operate (authentication, language preference). We do not use tracking or advertising cookies.

8. Security

We apply industry-standard security measures (HTTPS, password hashing, restricted database access). No system is 100% secure — we recommend using a strong password.

9. Governing Law

For users in the European Union and the European Economic Area, we process your data in accordance with the General Data Protection Regulation (GDPR). For users in Serbia, Bosnia and Herzegovina, and Montenegro, the applicable national data protection laws apply. This policy is always interpreted so as to provide you with at least the level of protection guaranteed by the laws of the country where you live.

10. Policy Changes

We will notify you of material changes by email or via a platform notice at least 14 days before they take effect.

11. Contact

For all privacy-related questions, contact us at: support@pawrentbalkans.com