Privacy & Cookie Policy

Overview

Who is responsible for your information?

This Privacy and Cookie Policy explains how Taya Tourism collects, uses, shares, stores and protects personal information when you visit tayalux.com, request a quote, make a hotel reservation or contact us.

Taya Tourism is the registered trade name of MZ Prime Holdings LLC, a Wyoming limited liability company. References to “Taya Tourism,” “we,” “us” and “our” mean MZ Prime Holdings LLC doing business as Taya Tourism.

Information we collect

What personal information may we collect?

We collect information that you provide directly, information needed to arrange and support a hotel reservation, and limited information created when you use our website.

• Name, email address, telephone number and country of residence
• Hotel dates, destination, room preferences, occupancy and guest details
• Guest ages when required to confirm occupancy or child policies
• Accessibility needs, dietary needs and other special requests you choose to provide
• Quote requests, booking records, confirmations and communications with us
• Payment status, transaction reference, amount, currency and refund information
• IP address, browser, device, referring page and website activity

If you provide information about another guest, you confirm that you are authorized to provide it and to receive booking communications on that guest’s behalf.

How we use information

Why do we process personal information?

• To prepare quotes and arrange, confirm and manage hotel reservations
• To communicate booking details, changes, supplier notices and support responses
• To process payments, eligible refunds and transaction records
• To send requested information and respond to questions or complaints
• To operate, secure, troubleshoot and improve our website and services
• To prevent fraud, misuse and unauthorized transactions
• To maintain business, accounting and legal records
• To comply with applicable law and enforce our agreements

Depending on the circumstances and applicable law, we process information to perform a contract or take steps requested before a contract, based on consent, to meet a legal obligation, or for legitimate business interests that do not override applicable privacy rights.

Sharing information

Who may receive personal information?

We share only the information reasonably needed to provide the requested service, operate our business or comply with law. Recipients may include:

• Hotels, accommodation providers, wholesalers and reservation platforms
• Payment processors, banks and fraud-prevention providers
• Website hosting, email, customer support, security and analytics providers
• Professional advisers, insurers, auditors and government authorities when required
• A successor or relevant party in a business reorganization, subject to appropriate safeguards

A hotel or supplier may process guest information under its own privacy policy. We encourage travelers to review the privacy information supplied by the relevant property or supplier.

International processing

Can information be processed in another country?

Yes. Hotel reservations may require information to be sent to a property, supplier or service provider in the destination country or another country where data protection rules may differ. Where required, we use contractual or other appropriate safeguards for international transfers.

Payments

How should payment information be provided?

Payment may be processed by Taya Tourism, an authorized payment provider or the applicable supplier, as identified during the reservation process. We may receive transaction details such as payment status, amount, currency and a transaction reference.

Cookies

How does our website use cookies?

Cookies and similar technologies are small files or identifiers used to remember preferences, maintain website functions, understand performance and improve the user experience. Depending on the tools enabled on our website, we may use:

• Strictly necessary cookies for security, forms and core website functions
• Preference cookies that remember selected settings
• Analytics cookies that help us understand website usage and performance
• Advertising or measurement cookies, if enabled, to evaluate relevant campaigns

Where consent is required, non-essential cookies are used only after you make a selection through the cookie notice or settings tool. You may also block or delete cookies through your browser. Blocking necessary cookies may prevent some website features from working correctly.

Retention and security

How long is information kept and protected?

We keep personal information only for as long as reasonably necessary for reservations, customer support, accounting, fraud prevention, disputes and legal obligations. Retention periods vary by record type and the law that applies. Information is deleted, anonymized or securely disposed of when it is no longer required.

We use reasonable administrative, technical and organizational measures designed to protect personal information. No website, transmission or storage system can be guaranteed to be completely secure.

Your privacy choices

What rights may you have?

Depending on your location and applicable law, you may have the right to request access to, correction of or deletion of personal information, or to request restriction, portability or objection to certain processing. You may also withdraw consent where processing relies on consent and may complain to a competent data protection authority.

To make a privacy request, email mz@tayalux.com. We may need to verify your identity before completing a request. Some information may be kept where permitted or required by law.

Children and guest data

How is information about children handled?

Our reservation services are intended for adults. When a reservation includes a child, the responsible adult may provide limited information, such as the child’s name and age, when required by the property’s occupancy or booking rules. We do not knowingly invite children to make reservations or submit personal information directly through the website.

External websites

Does this policy cover third-party websites?

No. Our website may link to hotel, supplier, payment or other third-party websites. Their privacy practices are governed by their own policies, and we are not responsible for their content or privacy practices.

Chrome extension privacy

How does Know Before You Stay handle information?

This section applies to the Chrome extension “Know Before You Stay,” created by Tayalux.com. The extension adds an on-page hotel decision panel with rating comparisons, monthly weather, destination timing, travel advisories, airports, currency and arrival information.

Information handled on a hotel page

When a hotel page is detected, the extension may read the minimum page information needed to provide its features:

• The hotel or property name
• The city, country and property coordinates when published by the page
• The public rating, rating scale and review count displayed on the page
• A check-in date contained in the page URL, when present
• Hotel-related structured data, headings and metadata used to determine whether the current page is a hotel page

The extension also uses the browser language locally to suggest relevant travel-advisory authorities and a home currency. If the user selects a passport or home country, only that two-letter country code is stored locally with Chrome storage so the choice can remain selected between pages and browser sessions.

The extension does not store or transmit a list of websites visited, browsing history, clicks, mouse movements, scrolling or keystrokes. It does not collect names, email addresses, telephone numbers, payment information, authentication information, health information or personal communications through the extension.

Country-level location

The supporting service operates through a Cloudflare Worker. When a network request is made, Cloudflare may derive an approximate country from the request’s IP address. This country-level information is used only to reorder relevant country and travel-authority suggestions. The extension receives only a two-letter country code from this endpoint. It does not request or use GPS or precise location, and the Worker does not cache the viewer-country response.

Standard cloud and network infrastructure may process technical request information, such as an IP address and request headers, to transmit, secure, protect and operate the service.

Information transmitted to provide results

The extension sends only the query information needed for the relevant feature over HTTPS:

• Hotel name and city for property matching and public Tripadvisor ratings
• Destination name or published coordinates for monthly climate information
• Destination country for official travel-advisory information
• Three-letter source and destination currency codes for an indicative exchange rate

The full hotel-page URL, the public rating displayed on the page and the user’s selected passport or home country are not intentionally sent to the extension’s supporting service.

How extension information is used

• To identify the hotel the user is viewing
• To compare the page’s public rating with a matching Tripadvisor rating
• To provide monthly climate, seasonal timing, travel-advisory, airport, currency and arrival context
• To remember the selected passport or home country locally on that device
• To maintain, secure and troubleshoot the extension and its supporting service

Extension information is not sold or used for personalized advertising, creditworthiness, lending or profiling unrelated to the extension’s disclosed features.

Service providers and information sources

To provide the features described above, the supporting service may request information from:

• Cloudflare, which hosts and protects the supporting Worker
• Tripadvisor Content API through the configured TERRA service, for hotel matching and public ratings
• Open-Meteo, for geocoding and historical monthly climate information
• ExchangeRate-API, for currency exchange rates
• Official government travel-advisory sources from Canada, the United States and the United Kingdom

Each service receives only the query information required for the relevant feature and may process it under its applicable privacy terms. The extension also provides user-initiated links to verified national travel portals and the IATA Travel Centre. No information is sent to a linked portal merely by displaying the link; the linked website receives a request only if the user chooses to open it.

Tayalux.com link

The panel includes an optional link to request a travel quote from Tayalux.com. Displaying the link does not send information to Tayalux.com. If the user chooses to open it, the hotel name and any detected check-in date are included in the destination URL so the planning page can begin with the relevant trip context. The user then chooses whether to submit contact or travel information on Tayalux.com, which is governed by the other provisions of this policy.

Storage, retention and deletion

• The passport or home-country selection is stored locally until the user changes it, clears extension data or removes the extension
• Hotel lookup results may be cached by the supporting service for up to seven days; the cache key contains normalized hotel and city terms and no user identifier
• Climate responses may be cached for up to one year, exchange-rate responses for up to twelve hours and travel-advisory responses for up to six hours; these caches are shared by query and are not linked to an individual user
• Cloud and network providers may retain limited operational and security logs under their applicable settings and terms

Users can change or clear the passport or home-country selection in the extension panel. Removing the extension or clearing its Chrome extension data removes locally stored preferences. Users can avoid sending hotel and destination queries by disabling or removing the extension.

Security and Chrome Web Store Limited Use

All information sent by the extension to its supporting service is transmitted over HTTPS. The extension does not download or execute remote JavaScript or other executable code; all executable extension code is included in the package distributed through the Chrome Web Store.

The use of information received from Chrome APIs and website access will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Information is used only to provide or improve Know Before You Stay’s disclosed, user-facing features. It is not sold or transferred for personalized advertising, creditworthiness, lending or unrelated profiling. Human access to extension user data is prohibited except when the user gives specific consent for support, when required for security, when required by law, or when data has been aggregated and anonymized for internal operations.

Children, changes and contact

Know Before You Stay is a general travel information tool and is not directed to children. It does not knowingly request names, email addresses or other contact information through the extension.

If the extension’s features or information practices change, this section and the update date below will be revised, and material changes will be disclosed as required before the changed practices begin. Questions or privacy requests relating to Know Before You Stay may be sent to mz@tayalux.com.

Updates

Can this policy change?

We may update this policy when our services, website tools or legal obligations change. The current version will be posted on this page with its latest update date. Material changes may also be communicated by another appropriate method when required.

Privacy contact

How can you contact Taya Tourism?

Last updated: July 26, 2026.