Privacy Policy

This policy explains what personal information ENSUITEKEY collects, why we collect it, and what you can do about it. We keep it plain on purpose. If anything is unclear, just ask.

ENSUITEKEY (Kiwi House, Canal Road, near NESPAK Phase 2, and Kangaroo House, Icon Valley Phase 2, Raiwind Road, Lahore, Pakistan) is responsible for your personal data. For anything to do with your data or this policy, email us at bookings@ensuitekey.com.

1. What we collect

Depending on how you deal with us, we may collect:

Who you are: name, nationality, and CNIC, NICOP or passport details.
How to reach you: email, phone or WhatsApp number, and country of residence.
Your booking: dates, apartment, number of guests, flight details for airport pickup, and any requests you send us.
Payment information: handled by our payment providers. We do not see or store your full card details.
Messages: what you send us by form, email or WhatsApp.
Website use: basic analytics about how the site is used, through cookies, and only if you agree.

2. Why we use it

We use your information to:

Take and manage your booking.
Meet local regulations that require us to register guests staying at our apartments.
Take payment and issue receipts or invoices.
Arrange services you ask for, such as airport pickup.
Improve our apartments and website.
Send you the occasional offer, but only if you have opted in. You can stop any time.

We will never sell, rent or trade your personal information.

3. Who we share it with

We only share what is necessary, with:

Our payment providers (such as Stripe, PayPal, JazzCash and Easypaisa), to process payments.
The tools that run our website and bookings, such as our booking system, website host and analytics provider.
Drivers or partners we book on your behalf, such as an airport transfer.
Booking platforms, when you book through them.
Pakistani authorities, when the law requires it.

4. Where your data goes

We are based in Pakistan, so your information is handled here. Some of the tools we use may process data in other countries. Wherever it goes, we take reasonable steps to keep it protected.

5. How long we keep it

We keep booking and payment records for up to 7 years for tax and accounting purposes. Identity documents collected for guest registration are kept only as long as the law requires. Enquiries that do not turn into bookings are deleted once they are no longer needed.

6. Your rights

You can ask us to:

Show you the data we hold about you.
Correct it.
Delete it, where we are not required to keep it.
Limit how we use it.

You can withdraw marketing consent at any time. To exercise any of these rights, email bookings@ensuitekey.com and we will respond as quickly as we can.

7. Cookies and analytics

Our website uses cookies. Some are needed for the site and booking system to work. Others, like analytics, only load if you accept them in the cookie banner. You can change your choice at any time in your browser settings.

8. Children

Bookings are made by adults aged 18 or over. We do not knowingly collect personal data directly from children. Younger guests stay as part of an adult’s booking.

9. Security

We take reasonable measures to protect your information. No method of sending or storing data online is completely secure, but we do our best to keep yours safe.

10. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the date below.

Last updated: September 2026.