Privacy Policy

What this site collects

This website has no user accounts. Its only form is the booking form, described under Bookings below. We use Google Analytics 4 to understand which pages are read and where visitors come from, Meta's pixel and Conversions API to see which buttons (Airbnb, WhatsApp, the date picker) lead to bookings and to measure our own advertising, and our own record of visits, described below. We never sell any of it.

Our own record of visits: under a random visitor number kept in a cookie on this site (nest_uid), we record the pages and sections you view, how long and how far you scroll, the buttons you tap, the dates you check in the booking calendar and how you arrived (for example from an Instagram ad), with your country and city (worked out from your connection when you arrive; the address itself is not kept), and what your browser says of your device: its type and model, screen, language, time zone and the kind of connection. It holds no name, email, phone number or IP address, and nothing you type: of a form it notes which fields were filled in, what the form answered when it asked for one again, and the outline of what stood in the name, number and email fields (every letter as “a”, every digit as “9”, and the name of a well-known mail service such as gmail.com), never the text itself. It tells us which dates people want and what makes the site easier to book from.

If you message us on WhatsApp from the site, the message ends with a short reference (like #N7K2QX) that lets us connect your message to that record; you can delete it before sending. If you book while your analytics choice allows this record, we connect your booking to your visits; after a Decline we do not. We keep the visit events for up to 14 months and a summary of each visit for up to 26 months, and we delete your record on request.

Visitors in the EU, UK and Switzerland see a consent banner first and nothing loads or is recorded until they accept. Elsewhere these tools run by default and stop the moment you press Decline. Our own record of visits follows the same choice, and is never made when your browser sends a Global Privacy Control signal. You can change your choice at any time by clearing this site's data in your browser, which resets the banner.

The Conversions API sends Meta the event name, the page, a random event id, your IP address and browser type, a scrambled copy of the random visitor number (never the number itself), and Meta's own _fbp/_fbc identifiers if its cookie is present. When a booking made on this site is confirmed, Google and Meta are also told that a booking happened, with its amount, its dates and its booking code, so we can see which advertising led to it.

Once you have held dates on this site, and while you allow this measurement, a scrambled (hashed) form of your email address, your phone number and your name is also sent to Meta with the events this site sends it, so that Meta can match them to an account. It is kept in your browser for that. Never the text itself: no name, email address or phone number is sent to Meta as you typed it, and Google is sent none of them in any form. Pressing Decline stops it and removes it from this device, and it is neither kept nor sent when your browser sends a Global Privacy Control signal.

Messages you send us

When you contact us on WhatsApp or by email, we see the details you choose to share (name, phone number, dates, questions). We use them only to answer you and to manage your stay. We do not sell or share them with anyone else.

Bookings

On Airbnb, reservations and payment are processed by Airbnb under Airbnb's own terms and privacy policy. We receive from Airbnb the details needed to host your stay, such as your name, party size and dates.

When you book on this site, the booking form asks for your name, your WhatsApp number and your email address and, if you choose to give them, when you expect to arrive, whether a pet is coming, any extras you add to the stay and anything you want Karl to know. This website stores none of it: it goes to Karl's own booking system, where it is used to hold your dates, confirm your booking and host your stay. It is never sold, and it is shared with no one, with two exceptions: the emails described in the next paragraph are carried by a mail service, and, if you allow measurement, a scrambled form of your email address, number and name goes to Meta, as described above. You pay Karl directly by Whish, or by card on Whish's own payment page through the link he sends you, so this site never sees your Whish account or any card. If you tell us which number you paid from, it is used only to find your payment.

The email address is asked for because your booking link and your confirmation are sent to it. Once you have typed it in the booking form, it is noted when you leave that field, press Book Now or leave the page, together with your dates and the name and number typed so far, even if you do not go on to hold the dates: the form's last line links to this page. A WhatsApp number typed with no email address beside it is noted the same way, with your dates and the name typed so far, so that Karl can write to you about them himself on WhatsApp; nothing is sent to a number automatically, and it is deleted with the rest: thirty days after the stay it was about, or sixty days after you typed it, whichever comes first. What is sent to it: your booking link when your dates are held; your confirmation when Karl has received your payment; and, if you do not finish, up to two reminders about those dates, the first no sooner than an hour later and the second a day after it, and never for dates that have been taken or have passed; and, now and then, an offer from The Nest. Karl may also write to you himself about those dates. These emails are carried by Resend, a mail service, which is given your address and the email itself, with your first name and, in an email about your dates, those dates and the price.

Offers go to the addresses the booking form was given, whether or not a booking followed. Karl may also add an address himself, for instance a past guest's; it gets the same offers and the same unsubscribe link. An offer email records whether it was opened and which of its links was tapped, so that we can see which offers are read. The emails about your own dates (your booking link, your confirmation and the reminders) record neither.

Every reminder and every offer ends with an unsubscribe link, and your mail app's own unsubscribe button works too. Either stops the reminders and the offers to that address for good; we then keep only a scrambled mark of the address, so that neither is sent to it again. If you book later, your booking link and your confirmation still come to the address you give.

How long it is kept: an email address given in the booking form from 7 October 2026 on is kept, with the name typed beside it, so that offers can be sent to it, until it is unsubscribed. The number, the dates and anything else noted with it are deleted 30 days after the check-in day of those dates, or 60 days after it was noted, whichever comes first. An address given before that day is deleted with them, on that same schedule, as this page said then.

If you allowed tracking on this site, the identifiers that Google's and Meta's cookies gave your browser, your browser type and your IP address are kept with a booking you start, so that a confirmed booking can be matched to the advertising that led to it. They are deleted once the confirmed booking has been reported to Google and Meta, or with your other details if the booking is not completed. If you did not allow tracking, none of them is kept.

If you start a booking and do not complete it, your name, number, email and note are deleted from that booking two days after it ends; the dates and the amount are kept as a count, with nothing that identifies you. The copy of your details noted from the form is deleted as the paragraph above says: the number and the dates 60 days after they were noted at the latest, the email address and the name when the address is unsubscribed. What you type into the form stays in your browser's tab, so that reloading the page or changing your dates does not empty it. When your dates are held, your name, number and email stay there until the tab is closed, so that changing your dates does not ask for them again; the rest is cleared. Your browser also keeps a private key to your own booking, with the last it was told about it (its code, your first name, the dates, the amount and where to pay) the number you booked with and, once you have told Karl that you paid, the number you said the payment came from, so that you can come back to it and are not asked for a number a second time. Clearing this site's data in your browser removes all of it.

Lebanese General Security requires hosts to hold a copy of guests' ID for the duration of the stay. IDs are used for that purpose only.

Cookies

The site itself sets only what it needs to work (for example, remembering your seasonal view, your analytics choice and, if you book here, what you type until your dates are held and the private key to your own booking) and, with your analytics choice, the random visitor number of our own record of visits (nest_uid, one year) and, once you have held dates here, the scrambled form of your email, number and name described above. Google Analytics and Meta's pixel, when running, set their own cookies as described in Google's and Meta's documentation.

Contact

Questions about this policy, or to have your visit record deleted: hello@thenestfaqra.com or WhatsApp +961 70 496 310.