Your data, handled with care.

LayStop ("LayStop", "we", "us") curates layover experiences for travellers with 6+ hour stopovers at Dubai International (DXB), Abu Dhabi International (AUH) and Hamad International in Doha (DOH), and plans tailor-made itineraries on request. LayStop is the data controller for the personal data described in this policy.

You can reach us at any time at info@laystop.com.

Contact requests. When you use the contact form we collect the details you enter: your name, email address, departure airport, layover dates and duration, arrival flight number, the type of experience you are interested in, the experience you asked about and anything you write in the message field.

Tailor-made requests. When you ask for a tailor-made itinerary we also collect your phone or WhatsApp number if you give it, your travel date, the hours you have, how many adults and children travel, your preferences and the budget band you choose.

Planner emails. When you ask the layover planner to email you the experiences that fit, we collect your email address, the airport and the hours you set, together with your IP address and browser type.

With both forms we record the IP address and browser identifier of the submission to protect the forms from abuse. Both forms are protected by Cloudflare Turnstile, which checks that the sender is a person without showing a puzzle; Cloudflare processes technical data about your browser for that check under its own privacy policy.

Technical data. Like every website, our servers process the technical information your browser sends (IP address, pages requested, referring page, browser type) in short-lived server logs used only to keep the site running securely. When something breaks, an error report containing the page, the browser type and the IP address is sent to Sentry, our error-monitoring provider, so we can fix it.

Analytics. We use Google Analytics 4 to understand how the site is used. Until you make a choice in the cookie banner, or if you decline, Google Analytics runs without cookies and without any identifier: it receives anonymous page and event counts that cannot be linked to you. If you accept, it also sets analytics cookies so that visits from the same browser can be counted as one visitor.

We do not offer user accounts, we do not process payments on this site and we never ask for passport, payment card or travel document details.

To answer your request. We use the details from the forms to reply to you, to check whether an experience fits your layover window and, when you ask us to, to prepare a tailor-made proposal. We send you one confirmation email when a request arrives, and one email with the fitting experiences when you ask the planner for it. We may write to you once more about that layover if you did not book; we do not send newsletters.

To keep the site secure and available. Server logs, error reports and the IP address stored with a request are used to detect spam, abuse and technical faults.

To improve the site. Aggregated analytics tell us which pages and experiences travellers find useful.

The legal basis is our legitimate interest in running the service and responding to enquiries, the steps needed to prepare the itinerary you asked for, and your consent for analytics cookies.

LayStop does not operate the experiences listed on this site. "Book" buttons take you to the booking site of the provider that runs the experience. When you book there, that provider becomes the controller of the data you provide and its own privacy policy applies. Some booking links are affiliate links: LayStop may receive a commission for bookings made through them, at no extra cost to you. No personal data is shared with a provider by following a link; the provider only sees that you came from laystop.com.

Service providers that host and run the site for us: our hosting and content-delivery providers (including Cloudflare, which also runs the Turnstile check), Mailgun, which delivers our emails from servers in the European Union, Sentry for error monitoring and Google Analytics. These providers process data only on our instructions.

Instagram. Journal posts may include an Instagram post that loads only after you click it; from that moment Meta processes your data under its own privacy policy. Nothing is loaded from Instagram until you click.

When we prepare a tailor-made itinerary we may pass your first name, party size and dates to the hotels and experience providers we ask for availability, and nothing more until you confirm.

We do not sell personal data and we do not share it with advertisers.

Some providers may process data outside the European Economic Area. Where that happens we rely on the safeguards provided by the applicable data protection law, such as standard contractual clauses.

Contact and tailor-made requests, and the emails left on the planner, are kept for as long as needed to handle your enquiry and for up to 24 months afterwards, so we can follow up on a future layover if you ask us to. Server logs are kept for a short technical retention period and error reports for 90 days. Analytics data is retained according to the settings of Google Analytics (currently 14 months).

Strictly necessary cookies: a session cookie and a security token that protect the forms. These are always set.

Analytics cookies: set by Google Analytics only after you click "Accept" in the cookie banner. If you decline, analytics still run without cookies and without identifiers, as described above.

Browser storage: the site remembers your cookie choice, the airport and the city you picked in the planner in your browser's local storage. That data never leaves your device.

You can change or withdraw your choice at any time with the "Cookie settings" link in the footer, which reopens the banner.

Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@laystop.com. We will reply within one month.

We may update this policy as the service evolves. The date at the top of the page tells you when it was last revised. Significant changes will be highlighted on this page.