Data Protection Policy
Last updated: July 2026
My1000Home is committed to protecting your personal data in accordance with international data protection standards and applicable laws in Cambodia and Southeast Asia. This policy explains how we handle your data and outlines your rights as a data subject.
1. Data Controller
My1000Home operates as the data controller for all personal information collected through our platform.
Email: info@my1000home.com
Website: www.my1000home.com
Address: Siem Reap, Cambodia
2. Scope
This Data Protection Policy applies to all individuals whose personal data we process, including guests, hosts, business partners, service providers, website visitors and any other individuals who interact with our platform.
3. Categories of Personal Data We Collect
Identity Data: Full name, username, profile photo, date of birth (where required)
Contact Data: Email address, phone number, physical address
Financial Data: Payment method information, transaction history, earnings data for hosts
Technical Data: IP address, browser type, device information, cookies, log data
Usage Data: Booking history, listing activity, platform interactions, search queries
Communication Data: Messages between users, support interactions, reviews and ratings
Verification Data: Identity documents and credentials submitted for host verification
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our obligations to you under our Terms of Service
- Legitimate Interests: Processing for platform security, fraud prevention and service improvement
- Legal Obligations: Processing required to comply with applicable laws in Cambodia and internationally
- Consent: Processing for marketing communications and optional features, where you have given explicit consent
5. Purposes of Data Processing
We process your personal data for the following specific purposes:
- Account creation, authentication and management
- Processing bookings and facilitating payments between guests and hosts
- Communicating with you about reservations and platform updates
- Verifying host identity and credentials
- Preventing fraud, money laundering and other illegal activities
- Improving our platform, services and user experience
- Conducting analytics, market research and business intelligence
- Complying with legal obligations under Cambodian law and international regulations
- Resolving disputes and enforcing our agreements
- Sending marketing communications (with consent)
6. Data Sharing and Third Parties
We do not sell, rent or trade your personal data. We may share your data with:
Payment Processors: ABA PayWay (regulated by the National Bank of Cambodia) and PayPal for secure transaction processing.
Hosts and Guests: We share necessary booking information between parties to facilitate service delivery.
Service Providers: Trusted third-party providers who assist in operating our platform under strict confidentiality and data processing agreements.
Regulatory Authorities: Cambodian government agencies, law enforcement and courts when required by applicable law.
Business Transfers: In the event of a corporate transaction, your data may be transferred to the acquiring entity with appropriate notice.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside Cambodia, including countries where data protection laws may differ. We ensure appropriate safeguards are in place for all international transfers, including contractual protections with our service providers and compliance with applicable data protection regulations.
8. Data Retention Periods
We retain different categories of data for different periods:
- Active account data: retained for the duration of your account
- Account data after closure: retained for 3 years
- Financial and transaction records: retained for 7 years for legal and tax compliance
- Communication logs: retained for 2 years
- Marketing preference data: retained until you withdraw consent
- Legal dispute data: retained for the duration of the dispute plus 3 years
9. Your Data Protection Rights
You have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Restrict Processing: Request restriction of processing in certain circumstances
- Right to Withdraw Consent: Withdraw consent for processing based on consent at any time
To exercise any of these rights, submit a written request to info@my1000home.com. We will respond within 30 days. We may need to verify your identity before processing your request.
10. Data Security Measures
We implement comprehensive security measures to protect your personal data:
- SSL/TLS encryption for all data transmissions
- Encryption of sensitive data at rest
- Secure password hashing using industry-standard algorithms
- Regular security audits and penetration testing
- Role-based access controls limiting data access to authorized personnel
- Regular data backups and disaster recovery procedures
- Ongoing staff training on data protection and security practices
- Incident response procedures for potential data breaches
11. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals without undue delay and, where required, notify relevant regulatory authorities in accordance with applicable law.
12. Cookies Policy
We use essential cookies (required for platform functionality), analytical cookies (to understand usage patterns), preference cookies (to remember your settings) and marketing cookies (with your consent). You can manage cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may affect platform functionality.
13. Children Data Protection
My1000Home is intended for users aged 18 and above. We do not knowingly collect, process or store personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and notify the appropriate parties.
14. Changes to This Policy
We may update this Data Protection Policy periodically to reflect changes in our practices, applicable laws or regulatory requirements. We will notify you of significant changes by posting the updated policy on this page with a new effective date and, where appropriate, by email or platform notification. Your continued use of our platform after such changes constitutes your acceptance of the updated policy.
15. Contact Our Data Protection Officer
For any data protection inquiries, to exercise your rights, or to raise a concern about our data practices, please contact us:
Email: info@my1000home.com
Website: www.my1000home.com
Address: Siem Reap, Cambodia
Response time: Within 30 days for data subject requests