Last updated October 25, 2026
Privacy & Cookie Policy
This policy explains how Buffalo BNB (“we”, “us”, “our”) collects, uses, shares and protects personal information when you visit buffalobnb.com, contact us, or book a stay with us, and the choices and rights you have. It applies to guests and visitors worldwide.
1. Who we are
Buffalo BNB is a short-term vacation rental operated by its owner and host, Kushal Basu, at 2 Niagara Falls Boulevard, Buffalo, NY 14214, United States. We are the “controller” responsible for personal information collected through this website. Contact details are in section 13.
2. Information we collect
- Contact and inquiry details you give us when you email, call, or use the group inquiry form: name, email address, phone number, travel dates, number of guests and your message.
- Booking details collected by our booking provider Hospitable when you reserve directly: guest names, contact details, stay dates, guest count, billing address and payment information. Card details are handled by Stripe and are never stored by us or on this website.
- Stay information needed to host you, such as arrival time, special requests, and any identity or guest-registration information required by law or by the booking platform.
- Device and usage information, only if you allow analytics: pages viewed, clicks on booking and contact links, approximate location (city/country), device, browser, referring site and visit times, collected by Google Analytics.
- Technical information processed by our hosting provider Cloudflare to deliver and secure the site, such as IP address and browser type in server logs, plus cookieless, aggregated performance statistics (Cloudflare Web Analytics).
If you book through Airbnb, Booking.com or Vrbo, those platforms collect your information under their own privacy policies and share with us what is needed to host your stay.
3. How we use information and our legal bases
| Purpose | Legal basis (EEA/UK GDPR) |
|---|---|
| Answering inquiries and quoting stays | Steps at your request before a contract; legitimate interests |
| Taking and managing bookings, payments, check-in and guest communication | Performance of a contract |
| Keeping records required for tax, accounting and local short-term rental rules | Legal obligation |
| Keeping the site secure and preventing fraud | Legitimate interests |
| Website analytics and loading the booking calendar and map | Your consent, which you can withdraw at any time |
| Advertising measurement (not currently used) | Your consent |
We do not sell your personal information, we do not use it for automated decision-making that has legal effects on you, and we do not send marketing emails unless you ask us to.
4. Who we share information with
- Hospitable (booking software and direct-booking calendar) and Stripe (payment processing and fraud prevention).
- Airbnb, Booking.com and Vrbo, when you book through them, and to keep our calendars synchronized.
- Google (Analytics, Tag Manager and Maps) and Cloudflare (hosting, security and performance).
- Email and phone providers we use to communicate with you, and cleaning or maintenance staff only to the extent needed to prepare for your stay.
- Authorities or advisers when required by law, to protect our rights or guests’ safety, or in connection with a sale of the property business.
5. Cookies and similar technologies
Cookies are small files stored on your device. We ask for your consent before using anything other than essential cookies, wherever you are located. Optional cookies stay off until you choose “Accept all” or switch on a category, and you can change or withdraw your choice at any time. We treat a Global Privacy Control (GPC) browser signal as a refusal of marketing cookies.
Third-party providers may change the names or lifetimes of their cookies. You can read their policies here: Hospitable (opens in a new tab), Stripe (opens in a new tab), Google (opens in a new tab) and Cloudflare (opens in a new tab). You can also block or delete cookies in your browser settings, or opt out of Google Analytics with Google’s browser add-on (opens in a new tab).
6. International transfers
We are based in the United States, and our service providers may process information in the U.S. and other countries. When personal information from the EEA, UK or Switzerland is transferred, we rely on the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on Standard Contractual Clauses approved by the European Commission, together with appropriate safeguards.
7. How long we keep information
- Inquiries that do not lead to a booking: up to 12 months.
- Booking, payment and stay records: as long as required for tax, accounting and legal purposes, generally up to 7 years.
- Google Analytics data: 14 months.
- Cookies: as listed in section 5.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy, including in a portable format;
- correct inaccurate information or have it deleted;
- restrict or object to our use of it, including use based on legitimate interests;
- withdraw consent at any time, without affecting earlier processing (use “Cookie settings” for cookies);
- opt out of the sale or sharing of personal information and of targeted advertising (we do neither);
- not be discriminated against for exercising your rights; and
- complain to a data protection authority, for example your local EU/EEA supervisory authority, the UK Information Commissioner’s Office, the Office of the Privacy Commissioner of Canada, or the Office of the Australian Information Commissioner.
To exercise a right, email inquiry@buffalobnb.com. We may need to verify your identity, and you may use an authorized agent. We respond within one month (45 days for U.S. state privacy requests), and may extend this where the law allows. If we decline a request, you can appeal by replying to our decision.
9. Additional information for U.S. residents
Residents of California and other states with consumer privacy laws: in the past 12 months we have collected identifiers, contact and booking details, commercial information (stay history), internet activity (with consent) and approximate geolocation, for the purposes in section 3, from you, our booking platforms and our service providers. We disclose them only to the categories of recipients in section 4 for business purposes. We do not sell or share personal information for cross-context behavioral advertising, and we do not knowingly sell or share information of consumers under 16. We do not use sensitive personal information to infer characteristics about you.
10. Security
The site is served only over encrypted HTTPS. We limit access to guest information to people who need it, and our providers protect payment data to PCI DSS standards. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
11. Children
This website is not directed at children, and we do not knowingly collect personal information from children under 16 (under 13 in the U.S.). Bookings must be made by an adult. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version, and we will ask for your cookie consent again when our use of cookies changes materially.
13. Contact us
Buffalo BNB (Kushal Basu)
2 Niagara Falls Boulevard, Buffalo, NY 14214, United States
Email: inquiry@buffalobnb.com
Phone: +1 (630) 300-4228