Privacy
What we collect when you contact us, why we hold it, who else sees it, and how to make us delete it.
Last updated 26 August 2026
Who holds your information
Cap de Douma, Douma, Batroun District, North Governorate, Lebanon. We decide what happens to the information described here, and we are the people you complain to about it. Everything on this page is reachable at stay@capdedouma.com.
We traded as Naseem Douma until 2026, and as Rock Yard before that. If you enquired under either of those names, the same people hold that message, on the same terms as below, and the same request to delete it works.
What we collect
What you type into a form on this site: your name, email address, phone number if you give it, your dates, and anything you write in the message field. If you sign up to the newsletter we store your email address and nothing else. If you write to us on WhatsApp instead, we hold that conversation the way anyone holds a WhatsApp conversation, along with the phone number and profile name you show us.
Our host also keeps ordinary server logs of requests to this site (the IP address, the browser, the page and the time), which exist to keep the site up and to stop abuse. We do not read them to follow visitors around, and they are not joined to anything you send us.
Why we hold it, and on what basis
To answer you, to arrange your stay, and to keep a record of the booking. That is the contract between us, or the steps leading up to it. The server logs rest on our legitimate interest in a site that works and is not abused. The newsletter rests on your consent, which you can withdraw at any time. We do not sell, rent or trade any of it, we run no advertising, and we build no profiles.
Who else sees it
Form submissions are processed by Netlify, which hosts this site, and are delivered to our own email, which our email provider carries. If you message us on WhatsApp, Meta carries that conversation under its own terms. If you pay by bank transfer, your bank and ours see what a transfer shows. Each of these holds the data on our behalf or in its own right as a service you have chosen to use, and no one else receives it. We will hand over information if a Lebanese court or a law we are subject to requires it, and only as far as it requires.
Where it goes
Our host and our email provider run servers outside Lebanon, mostly in the European Union and the United States, so contacting us means your information crosses a border. It is held under those providers' own data protection terms. If you would rather not send something abroad, telephone us instead.
How long we keep it
Booking enquiries for three years, which covers repeat guests and our own accounts. Newsletter addresses until you unsubscribe. Everything else is deleted when it stops being useful.
Keeping it safe
The site is served over an encrypted connection and access to the enquiry inbox is limited to the people running the property. No transmission over the internet is ever completely secure, though, and we cannot promise otherwise. Please do not send passport scans, identity documents or card numbers through a form or over WhatsApp. If we ever need a document from you, we will tell you a safer way to send it.
Your rights
Write to stay@capdedouma.com and ask for a copy of what we hold, a correction, deletion, or a copy in a portable form. You can object to a use, or withdraw consent, without giving a reason. Withdrawing does not unpick what was lawful before it. We answer within thirty days. Every newsletter has an unsubscribe link that works. Guests in the EU or the UK may also complain to their own data protection authority, though we would rather you came to us first.
Cookies and analytics
This site sets no cookies of its own and runs no analytics or advertising scripts. The map on the contact page is embedded from OpenStreetMap, and that service may set its own cookies when it loads. We do not control those, and their own policies apply.
Sites we link to
Where we link to a restaurant, a winery or a map, you leave this site and land with a business we do not run. What they collect and how they use it is between you and them, and their policies apply, not ours.
Children
This site is not aimed at children, and we do not knowingly collect information from anyone under sixteen. Bookings are made by adults. If you believe a child has sent us something, tell us and we will delete it.
Changes to this page
If what we do with your information changes, this page changes with it and the date at the top moves. The version you are reading is the one that applies.
This page is a working draft prepared alongside the site build. It is not legal advice. Have it reviewed against Lebanese law and, where you take bookings from the EU or UK, against the GDPR, before the site goes live.