PRIVACY POLICY
Last updated: December 29, 2025

Nimi Hotels (“Nimi Hotels,” “Nimi,” “we,” “our,” or “us”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. Nimi Hotels operates as a hotel management company and currently manages The Dylin, a hotel located in Madison, Wisconsin (the “Property”). This Privacy Policy explains our policies and practices regarding the information we collect from and about you when you (i) visit our website(s) and other digital services, including our direct booking and online check-in tools (collectively, the “Sites”), (ii) make a reservation, stay at, or otherwise receive services at the Property, or (iii) communicate or interact with us in connection with your reservation or stay (collectively, the “Services”). We want to provide you with confidence in how we collect, use, and safeguard information, and how you can contact us with questions or concerns.

International Guests (EEA/UK/Switzerland). If you are located in the European Economic Area, the United Kingdom, or Switzerland, certain data protection laws (including the EU General Data Protection Regulation) may apply to our processing of your personal information. For purposes of applicable data protection laws, Nimi Hotels is generally the “controller” of personal information collected through our Sites and Services, meaning we determine how and why that information is processed. If you book through a third-party channel (such as an online travel agency), that third party may separately act as a controller of information it collects directly from you under its own privacy policy. You may contact us at privacy@nimihotels.com or 730 Williamson St, Ste 150, Madison, WI 53703 with questions or requests.

By making a reservation, staying at the Property, or accessing or using any Site or Service, you acknowledge and agree to the practices described in this Privacy Policy. This Privacy Policy is incorporated by reference into any terms and conditions, guest accommodation terms, and other policies that apply to your reservation and stay.This Privacy Policy describes the types of information we may collect from you or that you may provide, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to information we collect:
-When you access or use the Sites, including our direct booking and online check-in tools.When you make a reservation directly with us.
-When you check in, stay at, or otherwise receive services at the Property.
-When you book through third-party booking channels (e.g., Airbnb, Expedia, Booking.com, Tripadvisor, corporate housing partners, and other online travel agencies) (collectively, “Booking Partners”).
-In email, text, phone, and other communications you have with us related to your reservation or stay.
-From service providers we use to operate our business (for example, payment processors, customer support tools, analytics providers, and cloud storage providers).

This Privacy Policy does not apply to information collected:
-Offline or through other means not specifically described above; or
-By third parties, including Booking Partners and payment processors, that collect information directly from you and maintain their own privacy policies (even if we receive certain information from them in connection with your reservation).

Please read this Privacy Policy carefully. If you do not agree with our practices, your only choice is not to use the Sites or Services or make a reservation. We may update this Privacy Policy from time to time. Changes are effective when posted, and your continued use of the Sites or Services after an update means you accept the updated Privacy Policy. Nothing in this paragraph is intended to limit any rights you may have under applicable law.

MINORS; CHILDREN UNDER 13
Guests must be at least 21 years of age to make a reservation and check in. Minors under 18 may stay at the Property only when accompanied by a parent, legal guardian, or another adult guest who is at least 21 years old and responsible for the minor during the stay, subject to any applicable terms and house rules.

No one under 13 years of age may provide personal information through the Sites or Services. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Sites or Services or provide any information to us, including your name, address, telephone number, or email address.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@nimihotels.com.

INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT
We collect, or may collect, several types of information from and about you when you use our Sites or Services, make a reservation, or stay at the Property, including:
-Identifiers and contact information, such as your name, email address, mailing address, telephone number, and similar information (“Personal Information”).
-Reservation and stay information, such as stay dates, number of guests, rate and booking details, special requests, preferences (where permitted), and information you provide in connection with your reservation.
-Check-in and identity verification information, including information from a government-issued identification document (e.g., driver’s license or passport). We collect this information during the registration process.
-Payment and billing information, such as payment card details and billing address. Payment card processing is typically handled by our payment processing providers, and we may receive limited information about your payment (for example, confirmation of payment and partial card details such as the last four digits).
-Customer service and communications, including records and copies of correspondence (including email addresses and phone numbers) if you contact us, and information you provide when requesting assistance or reporting a problem.
-Technical, device, and usage information when you visit or interact with our Sites, such as IP address, browser type, device identifiers, operating system, language settings, referring URLs, date/time of access, and information about how you navigate and use our Sites.

We collect this information:
-Directly from you when you provide it to us (for example, when you make a reservation, check in, complete forms, or communicate with us).
-Automatically when you use our Sites, through cookies and similar technologies (described below).
-From third parties that help provide the Services, such as Booking Partners (e.g., online travel agencies), payment processors, and other service providers, to the extent permitted by law and your settings with those third parties.

Calls
Where permitted by law, calls with us may be monitored or recorded for quality assurance and training purposes. Where required, we will provide notice and obtain consent.

Information you share publicly.
If you choose to interact with us on social media or other public channels (for example, by commenting on our posts or sending us messages through social platforms), the information you share may be visible to others and will be subject to the privacy practices of those platforms. Please do not share sensitive personal information through public channels.

USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES; DO NOT TRACK; THIRD-PARTY SERVICES

Use of Cookies and Other Tracking Technologies
We and our service providers may use cookies and similar technologies to collect certain information automatically when you visit or use our Sites. These technologies help us operate our Sites, remember your preferences, improve performance, understand how visitors use the Sites, and support analytics and marketing activities (where used).

The technologies we may use include:
-Cookies (browser cookies). A cookie is a small file placed on your device when you visit a website. You can set your browser to refuse some or all cookies or to alert you when cookies are being sent. If you disable cookies, certain features of the Sites may not function properly.
-Similar technologies (e.g., pixels, tags, SDKs, and local storage). We may use other technologies that function similarly to cookies, such as web beacons/pixels and local storage, to understand Site usage, measure the effectiveness of communications and campaigns (where used), and help deliver relevant content. These technologies may collect information such as your IP address, browser type, device identifiers, and interactions with the Sites.

Do Not Track
Some web browsers offer a “Do Not Track” (“DNT”) setting that allows you to signal that you do not want websites to track certain online activities over time or across websites. At this time, our Sites do not respond to DNT signals or similar mechanisms. This is because there is not yet a widely accepted standard for how companies should interpret and respond to DNT signals. If a standard is adopted in the future, we will evaluate how to respond and will update this Privacy Policy as appropriate.

Third-Party Responsibilities and Services
We use third-party companies, agents, contractors, and other providers (collectively, “Service Providers”) to help us operate our business and deliver the Services. Service Providers may perform functions such as: processing reservations; facilitating payments; sending emails or texts; scanning IDs; providing customer support tools; operating property management and related systems; hosting data; analytics; and marketing support.

In order to provide these functions, Service Providers may have access to certain information about you, including Personal Information, and we may share information with them as needed to perform services on our behalf. Service Providers typically maintain their own privacy policies and practices, which are not controlled by Nimi Hotels. We encourage you to review their privacy policies to understand how they handle your information.

We do not list all current Service Providers in this Privacy Policy because they may change from time to time. If you would like information about certain Service Providers we use, please contact us at privacy@nimihotels.com.

Third-party cookies and links. Some Service Providers and other third parties may use cookies or similar technologies to collect information when you use our Sites or when you click on advertisements or links. In addition, if you click a link to a third-party website from our Sites (including links to third-party content), that third party may place cookies or similar technologies on your device. We do not control third-party websites or third-party tracking technologies, and their practices are governed by their own privacy policies. Third-party tracking may continue even after you leave our Sites, and those third parties may not honor DNT settings you have enabled in your browser.

RESERVATION SYSTEM – MEWS
We use Mews to store and manage information related to reservations, check-in, and guest stays at the Property. We do this to provide a reliable and secure booking process while concentrating on our real business of hospitality. Any personal information you share when making a reservation or checking in may be shared with Mews in order to process it. More information about Mews and its privacy policy can be found here: https://www.mews.com/en/privacy-policy.

Google Analytics and Google Search Console
We may use Google Analytics and Google Search Console to help us understand how visitors interact with our Sites (for example, pages visited, time spent on the Site, and referring websites). Google Analytics may collect information such as your IP address and device/browser information. We use this information to improve our Sites and services. You can control cookies through your browser settings, and you may be able to opt out of certain Google Analytics tracking using Google’s opt-out tools (including the Google Analytics Opt-out Browser Add-on).

Google Tag Manager
We may use Google Tag Manager to manage website tags. Google Tag Manager itself is designed to be a tag management system; tags implemented through it may collect information as described in this Policy.

HOW WE USE YOUR INFORMATION
We use the information we collect from and about you, including Personal Information, for the purposes described in this Privacy Policy and as permitted by applicable law. Where required under applicable law (including for individuals located in the EEA/UK/Switzerland), we process Personal Information based on one or more of the following legal grounds:
-Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., to process your reservation and provide your stay).
-Legitimate Interests: processing is necessary for our legitimate interests (or those of a third party), such as operating our business, improving our Services, preventing fraud, and maintaining safety and security, provided those interests are not overridden by your rights.
-Legal Obligation: processing is necessary to comply with legal or regulatory obligations.
-Consent: where required, we process Personal Information based on your consent (which you may withdraw at any time, subject to applicable law).

We use Personal Information and other information for purposes such as:
-Reservations and guest services. To process reservations, complete check-in/check-out, provide accommodations and guest services, and respond to requests during your stay.
-Communications. To send reservation-related messages and operational notices (e.g., confirmations, pre-arrival information, property updates, and customer support communications).
-Identity verification and safety. To verify identity (including through ID scanning at registration), protect guests and staff, prevent fraud, and support security and incident management.
-Payments and billing. To process payments, manage billing and collections, and maintain financial records.
-Customer support. To provide technical support for the Sites and to address questions, complaints, and service issues.
-Service Providers. To allow our Service Providers to perform services on our behalf (e.g., booking, payments, ID scanning, analytics, hosting, communications tools), consistent with this Privacy Policy.
-Improvement and analytics. To understand how our Sites and Services are used, improve performance and functionality, develop new features, and enhance the guest experience.
-Reviews and feedback. To request and respond to reviews, surveys, and feedback.
-Marketing (where permitted). To send marketing or promotional communications about our services and offers, and to conduct marketing analytics. Where required by law, we will obtain your consent and provide you with the ability to opt out of marketing communications.
-Targeted advertising (if used). We may work with marketing and advertising partners to measure campaign performance and, where used, deliver ads on third-party platforms. Where required by law, we will provide appropriate choices and obtain consent for non-essential cookies/technologies.

We may also use information that has been de-identified, anonymized, or aggregated so it does not reasonably identify you, for any lawful purpose, including internal reporting, analytics, and business planning.

Some information we collect automatically (such as device and usage data) may be statistical in nature. We may associate this information with Personal Information we have collected to help us operate, maintain, and improve our Sites and Services.

STORAGE AND TRANSFER OF YOUR INFORMATION
We may store Personal Information and other information we collect in systems and databases operated by us or by our Service Providers. Your information may be processed and stored in the United States and in other countries where we or our Service Providers maintain facilities or personnel.

If you access or use the Sites or Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions that may have data protection laws different from those in your place of residence.

Where required by applicable law (including for individuals located in the EEA/UK/Switzerland), we take steps designed to help ensure an adequate level of protection for Personal Information transferred internationally, such as relying on recognized transfer mechanisms (for example, Standard Contractual Clauses) and implementing appropriate technical and organizational safeguards.

We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business needs. Retention periods may vary depending on the nature of the information and the reason it was collected.

DISCLOSURE OF YOUR INFORMATION
We may disclose de-identified, anonymized, or aggregated information that does not reasonably identify you, for any lawful purpose.

We may disclose Personal Information that we collect from or about you, or that you provide, as described in this Privacy Policy, including:
-To our affiliates. We may share information with our subsidiaries, affiliates, and related entities for purposes consistent with this Privacy Policy, including operating and improving our Sites and Services and administering reservations and guest services across properties.
-To Service Providers. We share information with vendors, contractors, and other service providers that perform services on our behalf (such as reservation and guest service tools, payment processing, ID scanning, guest communications, IT support, analytics, cloud hosting, and marketing support). These parties are authorized to use Personal Information only as necessary to provide services to us (and as otherwise permitted by applicable law).
-To booking channels and partners (as applicable). If you book through a Booking Partner (such as an online travel agency), we may share information as needed to confirm, administer, and service your reservation and stay, and we may receive information from that Booking Partner.
-To professional advisors. We may disclose information to our auditors, insurers, accountants, attorneys, and other professional advisors where necessary for our business purposes.
-For business transfers. We may disclose information to a buyer, seller, successor, or other relevant third party (and their advisors) in connection with a proposed or actual merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, including in bankruptcy or liquidation, where Personal Information may be transferred as part of the transaction.To fulfill the purpose you provide it for. For example, if you request a service that requires sharing information with a vendor or partner, we will share information as needed to complete your request.
-With your consent or at your direction. For any other purpose disclosed at the time you provide information, or with your consent where required.

We may also disclose Personal Information:
-To comply with law or respond to lawful requests, court orders, subpoenas, or legal processes, including from government or regulatory authorities.
-To enforce agreements and protect our rights, including to enforce terms and policies and for billing and collection purposes.
-For safety and security. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Nimi Hotels, the Property, our guests, our staff, or others, including to prevent fraud, security incidents, or other harmful activity.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION
We strive to provide you with meaningful choices regarding how your Personal Information is used.

Marketing emails. If you receive promotional emails from us, you can opt out at any time by using the unsubscribe link in the email. Even if you opt out of marketing messages, we may still send you non-promotional communications related to your reservation or stay (for example, confirmations, service messages, and important updates).

Cookies and similar technologies. Most browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies; however, some Site features may not function properly if you do. You may also be able to limit certain tracking through your device settings (where applicable).

Targeted advertising (if used). If we engage in targeted advertising, you may have choices about how certain advertising partners use cookies and similar technologies. Where required, we will offer appropriate opt-outs and/or consent choices.

Your privacy rights. Depending on where you live, you may have additional rights and choices regarding your Personal Information. Please see the sections below for details on rights for California residents, EEA/UK/Switzerland residents, and other jurisdictions.

ACCESSING, UPDATING, AND CORRECTING YOUR INFORMATION
You may request to access, update, correct, or delete Personal Information you have provided to us by contacting us at privacy@nimihotels.com. We may need to verify your identity before processing certain requests. In some cases, we may be unable to comply with a request (for example, if fulfilling the request would violate applicable law, conflict with our legal obligations, or result in information being incorrect).

Please note that if you booked through a Booking Partner (such as an online travel agency), you may also need to contact that Booking Partner directly to update information maintained in their systems.

PRIVACY RIGHTS FOR CALIFORNIA RESIDENTS
If you are a California resident, you may have certain rights regarding your Personal Information under applicable California privacy laws. In addition, California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes.

Do Not Sell or Share / Targeted Advertising.
We do not sell California residents’ personal information in exchange for money. We may share personal information with service providers and, depending on how our marketing and analytics tools are configured, may “share” personal information for cross-context behavioral advertising as defined by California law. California residents may opt out of such “sharing” by contacting us at privacy@nimihotels.com. Where required, we also process opt-out preference signals recognized under California law (such as the Global Privacy Control).To submit a request, please contact us at privacy@nimihotels.com or write to us at: 730 Williamson St, Ste 150, Madison, WI 53703.

PRIVACY RIGHTS FOR EEA/UK/SWITZERLAND RESIDENTS
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have certain rights under applicable data protection laws, subject to certain conditions and exceptions. These may include the right to:
-Request access to Personal Information we hold about you;
-Request correction of inaccurate or incomplete Personal Information;
-Request deletion of your Personal Information in certain circumstances;
-Request restriction of processing in certain circumstances;
-Object to processing based on legitimate interests, including processing for direct marketing;
-Request data portability (to receive certain Personal Information in a structured, commonly used, machine-readable format, and/or to have it transmitted to another controller where technically feasible); and
-Withdraw consent where we rely on consent (withdrawal does not affect the lawfulness of processing before withdrawal).

If you are located in France, you may also have the right to provide instructions regarding the retention, deletion, and communication of your Personal Information after your death.

To exercise any of these rights, contact us at privacy@nimihotels.com or write to us at 730 Williamson St, Ste 150, Madison, WI 53703. You also have the right to lodge a complaint with your local data protection authority. For example, if you are in the UK, you may contact the Information Commissioner’s Office (ICO).

RIGHTS IN OTHER JURISDICTIONS
Depending on where you live, you may have similar rights regarding your Personal Information under applicable law. You can submit a request by contacting us at privacy@nimihotels.com, and we will respond as required by applicable law.

HOW LONG WE STORE YOUR PERSONAL INFORMATION
We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, maintain business records, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

When Personal Information is no longer needed for these purposes, we take reasonable steps to securely delete, de-identify, or anonymize it in accordance with applicable law and our retention practices.

DATA SECURITY
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect Personal Information, we cannot guarantee absolute security.

If you create or use login credentials associated with our Sites or Services, you are responsible for maintaining the confidentiality of your username and password and for any activity that occurs under your account. We encourage you to use a strong password and not share it with others.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this Privacy Policy. If we make material changes, we will provide notice as required by applicable law, which may include posting a prominent notice on our Sites and/or notifying you by email where appropriate.

Your continued use of our Sites or Services after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy to the extent permitted by applicable law.

SURVIVAL
This Privacy Policy will remain in effect even if your reservation is completed or canceled, your account is closed, or you otherwise stop using our Sites or Services, subject to our retention practices and applicable law.

CONTACT US
If you have questions about this Privacy Policy or our privacy practices, or if you would like to submit a privacy-related request, please contact us:
Email: privacy@nimihotels.com
Mail: 730 Williamson St, Ste 150, Madison, WI 53703