a) Information You Provide Directly

• Full name, email address, phone number, and mailing address
• Date of birth (where required by law)
• Government-issued photo ID (for identity verification as required by applicable regulations)
• Payment information (credit card numbers, billing address); note that payment card data is processed by our third-party payment processors and is not stored on our servers
• Booking details (dates, number of guests, special requests, pet information)
• Communications you send to us (emails, chat messages, phone calls, reviews)
• E-signature on rental agreements and waivers

b) Information Collected Automatically

• IP address, browser type, operating system, device identifiers
• Pages visited, time spent on pages, referring/exit pages, clickstream data
• Cookies, pixel tags, and similar tracking technologies (see Section 5 below)
• Location data (general geographic location derived from IP address)

c) Information from Third Parties

• Booking channel data if you initially discovered us through a third-party platform (e.g., Airbnb, Vrbo, Google) before completing a direct booking
• Payment verification and fraud prevention data from payment processors
• Analytics data from third-party services such as Google Analytics

d) Information Collected During Your Stay

• Noise level data from noise monitoring devices (decibel levels only; no audio recording)
• Exterior video surveillance footage from cameras in public and common areas
• Smart lock access logs (entry and exit times)
• WiFi usage logs (connection times and bandwidth; we do not monitor browsing activity)
• Damage or maintenance reports

We use the information we collect for the following purposes:

• Processing and managing your reservation, payment, and stay
• Verifying your identity and preventing fraud
• Communicating with you regarding your booking, check-in instructions, and guest services
• Enforcing our Terms & Conditions, Rental Agreement, and Rental Rules
• Monitoring property safety and security (noise, occupancy, exterior surveillance)
• Processing damage claims, security deposit deductions, or waiver claims
• Improving our properties, services, and website functionality
• Sending marketing communications (only with your consent; see Section 6 below)
• Complying with legal obligations, including tax reporting and regulatory requirements
• Resolving disputes and enforcing our agreements

We do not sell your personal information. We may share your information with the followingcategories of third parties:

• Property Owners: We share relevant booking and stay information with the owners of the properties we manage, as necessary for property management purposes.
• Service Providers: We share information with third-party service providers who assist us in operating our business, including payment processors, property management software providers (e.g., Guesty), cleaning and maintenance providers, guest verification services, and IT/hosting providers. These providers are contractually obligated to use your information only for the services they provide to us.
• Legal & Compliance: We may disclose your information when required by law, court order, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, safety, or property, or the rights, safety, or property of others.
• Business Transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share your information for other purposes with your explicit consent.

We retain your personal information for as long as necessary to fulfill the purposes described inthis Privacy Policy, including to satisfy legal, accounting, and reporting requirements. Specificretention periods include:

• Booking and transaction records: Retained for a minimum of 7 years for tax and accounting purposes.
• Government-issued ID images: Deleted within 30 days after your checkout date, unless retention is required for a pending dispute, claim, or legal obligation.
• Noise monitoring data: Retained for 90 days after checkout unless related to a dispute or violation.
• Exterior surveillance footage: Retained for 30 days unless related to an incident or legal matter.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.

Our Site uses cookies and similar tracking technologies to enhance your browsing experience,analyze site traffic, and personalize content. The types of cookies we use include:

• Essential Cookies: Necessary for the Site to function properly, including session management and security. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Site (e.g., Google Analytics). These collect aggregate, anonymous data.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns. These are only placed with your consent.

You can manage your cookie preferences through your browser settings or through our cookieconsent banner when you first visit the Site. Please note that disabling certain cookies mayaffect Site functionality.

We may send you promotional emails about special offers, new properties, or other informationwe think you may find interesting, but only if you have opted in to receive such communications.You can opt out of marketing emails at any time by clicking the “unsubscribe” link in anymarketing email or by contacting us at the address below. Opting out of marketingcommunications does not affect transactional communications related to your booking.

We implement commercially reasonable administrative, technical, and physical safeguards toprotect your personal information against unauthorized access, alteration, disclosure, ordestruction. These measures include encryption of sensitive data in transit (SSL/TLS), accesscontrols, secure payment processing through PCI-DSS compliant processors, and regularsecurity assessments.

However, no method of transmission over the internet or electronic storage is 100% secure.While we strive to protect your personal information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personalinformation:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request that we correct inaccurate or incomplete personal information.
• Right to Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt Out of Sale: We do not sell personal information; however, if this changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the information in Section 12 below. Wewill respond to verifiable requests within the timeframe required by applicable law (generally 30–45 days). We may need to verify your identity before processing your request.

Our Site and services are not directed to children under the age of 18. We do not knowinglycollect personal information from children under 18. If you are a parent or guardian and believethat your child has provided us with personal information, please contact us so that we can takeappropriate action.

Our Site may contain links to third-party websites, services, or platforms. We are notresponsible for the privacy practices or content of those third parties. We encourage you toreview the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. Changes will be posted on this page withan updated effective date. We encourage you to review this Privacy Policy periodically. Yourcontinued use of the Site or our services after any changes constitutes your acceptance of theupdated Privacy Policy. For material changes, we will make reasonable efforts to notify you viaemail or a prominent notice on the Site.

If you have any questions, concerns, or requests regarding this Privacy Policy or our datapractices, please contact us at:
Oak Street Capital LLC
Email: hello@fiveoakcollection.com

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer
Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know
what personal information we collect, the right to delete your personal information, the right to
opt out of the sale or sharing of your personal information, and the right to limit the use ofsensitive personal information. To exercise these rights, contact us at the information above.
You may also designate an authorized agent to make a request on your behalf.
‍
Virginia, Colorado, Connecticut, and Other State Privacy Laws
Residents of states with comprehensive privacy laws (such as Virginia’s CDPA, Colorado’s
CPA, and Connecticut’s CTDPA) may have similar rights to access, correct, delete, and opt out.
Please contact us to exercise your rights under applicable state law. If we decline your request,
you may have the right to appeal our decision.