Accessibility and Cookies Policy

Part A - Accessibility

Our Commitment to Accessibility

Palmabook Holdings Inc and its affiliated operations, including Palmabook Holdings, Inc. as applicable, are committed to making palmabook.com accessible and usable for the broadest possible range of people, including individuals with disabilities. We design and maintain our digital services with the goal of providing an inclusive user experience across devices, browsers, languages, and assistive technologies.

Palmabook targets conformance with the Web Content Accessibility Guidelines version 2.1, Level AA, across core consumer-facing website and booking flows. This includes primary navigation, search, listing pages, checkout, account access, authentication, legal disclosures, and customer support pathways.

Accessibility is an ongoing program rather than a one-time project. Palmabook conducts periodic reviews of new and existing features, including manual and automated checks, and incorporates accessibility remediation into product development and maintenance cycles. Our current objective is to review priority user journeys on a recurring basis and to reassess accessibility whenever material design, engineering, or vendor changes are introduced.

Standards We Follow

Palmabook’s accessibility program is informed by the following standards and legal frameworks:

WCAG 2.1 Level AA

WCAG 2.1 AA is Palmabook’s principal technical target for web accessibility. We use this standard as the baseline for design, development, content authoring, and testing of digital experiences.

Section 508 Alignment

For users in the United States, Palmabook seeks practical alignment with the accessibility principles reflected in Section 508 of the Rehabilitation Act, to the extent relevant to commercial web services and digital communications.

EN 301 549

For European users, Palmabook considers the accessibility requirements reflected in EN 301 549, which is widely used as the reference standard for ICT accessibility in Europe and supports implementation of WCAG-based accessibility expectations.

European Accessibility Act

Palmabook monitors and prepares for obligations that may apply to private-sector consumer digital services under the European Accessibility Act and related national implementation measures, including requirements that become applicable in 2025 and thereafter. Where Palmabook offers consumer-facing services into applicable EU markets, we aim to structure our digital interfaces, disclosures, and support processes in a manner consistent with those requirements.

ADA-Informed Approach

Although the Americans with Disabilities Act does not prescribe a single web technical standard, Palmabook seeks to operate in a manner consistent with ADA accessibility expectations for online consumer services by maintaining accessible digital pathways and offering reasonable alternative access where needed.

Features Implemented

Palmabook has implemented, or is in the process of implementing across relevant pages and flows, the following accessibility measures:

Semantic Structure and Landmarks

We use semantic HTML and structural landmarks to help users navigate content by region and heading hierarchy. This is intended to support assistive technologies and improve orientation within pages.

Keyboard Navigation

Palmabook is designed so that key functions can be used with a keyboard alone, without requiring a mouse or touch input. This includes navigation menus, search controls, property browsing, forms, account actions, and checkout steps, subject to the limitations of certain third-party components described below.

Visible Focus Indicators

Interactive elements are intended to display visible focus outlines or equivalent indicators so keyboard and switch-device users can determine where they are on the page.

Skip Navigation

Palmabook provides a skip-to-content mechanism on supported page templates to help keyboard and screen-reader users bypass repeated navigation and move directly to the primary page content.

Accessible Names for Controls

Icon-only buttons and similar controls are intended to include accessible labels through visible text, ARIA labeling, or equivalent programmatic naming techniques so their function can be understood by assistive technologies.

Language Identification

Palmabook sets the page language attribute where supported and adapts locale presentation based on user settings and browser preferences. This is particularly important for screen-reader pronunciation and multilingual content handling.

Color Contrast

Palmabook aims to maintain a minimum contrast ratio of 4.5 to 1 for normal text and 3 to 1 for large text and essential interface elements, consistent with WCAG 2.1 AA requirements.

Responsive Design and Zoom Support

The site is designed to function across common screen sizes and orientations, including mobile, tablet, and desktop interfaces. We aim to preserve usability under browser zoom and responsive reflow conditions.

Text Alternatives for Images

Relevant informational images are intended to include meaningful alternative text. Decorative images should be marked or implemented in a way that minimizes unnecessary screen-reader interruption.

Accessible Forms

Palmabook seeks to associate form inputs with clear labels, instructions, and validation messaging. Error states should be programmatically connected to the relevant fields where technically feasible, and error messages should identify the issue in understandable language.

Known Limitations

Palmabook relies in part on third-party products and embedded technologies that may affect accessibility. These may include, for example:

Payment Components

Stripe Elements and related payment iframes are controlled in whole or in part by Stripe. Palmabook selects reputable providers and uses accessible integration patterns where available, but certain payment-field behaviors, focus handling, or assistive-technology interactions may depend on the third party’s own accessibility implementation.

Maps and Location Tools

Google Maps and other map-based or geolocation components may present accessibility limitations for some users, particularly where map interfaces are used as a supplement to text-based content. Palmabook seeks to provide text alternatives or conventional navigation options where practical.

Third-Party Authentication and Messaging

Authentication workflows involving WhatsApp OTP delivery, Twilio services, passkey prompts, and browser- or device-level security interfaces may vary depending on the external platform, operating system, or device manufacturer.

Palmabook monitors accessibility issues involving third-party tools and, where a material issue is identified, will attempt to implement a workaround, change configuration, offer an alternative path, or escalate the issue to the relevant vendor.

How to Report an Accessibility Issue

Palmabook welcomes feedback on accessibility barriers, compatibility issues, and improvement opportunities.

If you encounter an accessibility issue on palmabook.com, please contact:

partners@palmabook.com

Please include the subject line Accessibility and, if possible, provide:

Helpful Information to Include

The page URL or feature involved

The device, browser, and assistive technology used

A description of the issue encountered

Any screenshots or steps to reproduce the issue, if available

Palmabook will make reasonable efforts to acknowledge accessibility reports within 2 business days and to resolve the issue, provide a workaround, or communicate next steps within 30 days.

Assistive Technologies Tested

Palmabook’s accessibility testing program includes review against commonly used assistive technology combinations, including as appropriate:

Desktop Screen Readers

NVDA with Firefox

NVDA with Chrome

JAWS with Chrome

VoiceOver with Safari on macOS

Mobile Assistive Technologies

VoiceOver with Safari on iOS

TalkBack with Chrome on Android

Testing may vary by feature, release stage, device generation, browser version, and operating system. Palmabook does not guarantee identical behavior across every possible environment, but seeks reasonable compatibility with current mainstream combinations.

Accessible Alternatives

If a specific page, feature, document, or transaction pathway is not accessible to you, Palmabook will, upon request and where reasonably possible, provide the relevant information or assistance through an accessible alternative channel.

Depending on the issue, this may include support by email, alternative written format, or guided assistance through a booking or account process. To request an accessible alternative, contact partners@palmabook.com and describe the information or transaction you need.

Training and Governance

Palmabook treats accessibility as a shared responsibility across product, design, engineering, content, and support functions.

Training

Palmabook intends to provide annual accessibility training for relevant product and engineering personnel, with supplemental guidance for content and customer support teams where needed.

Development Process

Palmabook plans to integrate accessibility checks into pull-request review and quality assurance processes in Phase 2 of its engineering governance program. This is intended to improve early issue detection before code is released to production.

Internal Oversight

Accessibility issues may be prioritized based on severity, user impact, legal risk, and volume of affected traffic. Material barriers affecting core booking, payment, login, or support pathways are targeted for expedited review.

Part B - Cookies and Similar Technologies

What Are Cookies

Palmabook uses cookies and similar technologies on palmabook.com to operate the website, remember preferences, measure performance, protect accounts, and, where permitted by law and user choice, support analytics and advertising.

Cookies are small text files placed on a browser or device when a user visits a website. Similar technologies may include local storage, session storage, pixels, tags, SDK-linked identifiers, and server-side event handling.

Cookies may be:

First-Party Cookies

Set directly by Palmabook or on Palmabook’s domain to support site functionality, security, authentication, language selection, and consent management.

Third-Party Cookies

Set by service providers or partners integrated with Palmabook, such as Google, Stripe, Twilio, or AWIN, usually in connection with analytics, advertising, payment processing, affiliate attribution, mapping, or authentication-related interactions.

Session Cookies

Stored for a limited period tied to a browsing session or a short operational window.

Persistent Cookies

Stored for a longer period until they expire or are deleted by the user or browser settings.

Palmabook may also use local storage and session storage for technical functions such as session continuity, interface state, language preference, and consent choice recording.

Categories Used on Palmabook

Palmabook uses the following categories of cookies and similar technologies.

Strictly Necessary

These technologies are required for the website to function properly and cannot be switched off in our consent interface because they are necessary to provide a requested service or to maintain the security and integrity of the site.

They may include:

Session management

CSRF and anti-fraud protections

Authentication and login state

Passkey and multi-factor flow continuity

Language or locale preference

Consent state storage

Load balancing and infrastructure stability

These are always active, subject to applicable law and the technical necessity standard.

Performance and Analytics

These technologies help Palmabook understand how users interact with the site, measure traffic and feature usage, identify errors, and improve content and conversion flows.

Palmabook uses Google Analytics 4 with tracking ID G-6Z719PJGL3. In jurisdictions that require prior opt-in consent for analytics cookies or analytics-related identifiers, these technologies are activated only after valid consent is obtained. In other jurisdictions, they may be used subject to applicable notice, choice, and legal requirements.

Advertising

These technologies support ad measurement, remarketing, audience building, conversion tracking, and campaign performance analysis.

Palmabook uses Google Ads with tracking ID AW-7996167009. Advertising cookies and related identifiers are deployed only where permitted by law and, in opt-in jurisdictions, only after explicit user consent. Where consent is not granted, advertising tags should remain denied or operate only in a restricted, non-identifying mode if legally permitted.

Consent Mode v2

Palmabook uses Google Consent Mode v2 to communicate user consent choices to Google tags in a structured way.

In GDPR and UK GDPR regions, analytics and advertising-related consent signals are denied by default until the user gives affirmative consent through Palmabook’s consent banner or preference center. If consent is granted, the applicable consent signals are updated to reflect that choice. If consent is refused, denied-state signaling remains in effect.

In non-GDPR regions, Palmabook may apply different default settings as permitted by applicable law, including notice-and-choice frameworks rather than prior opt-in, while still honoring user selections made through available controls.

Consent Mode v2 signaling may include consent states relevant to ad storage, analytics storage, ad user data, and ad personalization. Palmabook uses these signals to reduce unauthorized tag behavior in regulated regions and to support region-appropriate compliance logic.

Third-Party Cookies and Similar Technologies

Palmabook may enable third-party technologies only when relevant to a user interaction or service request.

Stripe

Stripe Elements may place or access cookies and other identifiers within embedded payment fields or related fraud, security, and checkout flows. These are generally tied to payment initiation and transaction integrity.

Twilio

Twilio Verify and related communication services may process technical identifiers associated with OTP authentication, message delivery, and abuse prevention.

Google Maps

Map components may set or access cookies when an interactive map is loaded, typically to support map rendering, usage preferences, or fraud prevention.

AWIN

AWIN affiliate technologies may set attribution-related cookies or identifiers when a user arrives from or interacts with an affiliate referral source, subject to applicable consent rules.

Palmabook does not control all cookies or storage mechanisms used by third-party providers and encourages users to review those providers’ own privacy and cookie disclosures.

Managing Your Preferences

Palmabook provides several ways to manage cookie choices.

Consent Banner and Preference Center

On first visit, users in regions where consent is required will be presented with a consent banner. Users can accept, reject, or customize non-essential categories. Palmabook also provides a preference center accessible from the website footer so users can revisit and modify their choices later.

Browser Controls

Most browsers allow users to block, restrict, or delete cookies. Users may also configure browsers to notify them before cookies are placed. Blocking some cookies may affect functionality, including login continuity, checkout, maps, saved preferences, or fraud-prevention controls.

Do Not Track

Because there is no universally accepted standard for interpreting Do Not Track signals, Palmabook does not rely on browser Do Not Track alone as a substitute for region-specific consent or opt-out mechanisms. Users should use Palmabook’s preference center and browser settings to manage choices.

Global Privacy Control

Palmabook honors Global Privacy Control signals where applicable under law, including for California-related opt-out rights concerning sale or sharing of personal information for cross-context behavioral advertising. Where a valid GPC signal is detected, Palmabook will treat it as an opt-out request to the extent required.

Retention Periods

Palmabook seeks to retain cookie-related and associated technical data for no longer than necessary for the purpose collected, subject to legal, security, fraud-prevention, and operational requirements.

The following baseline periods apply unless a shorter period is technically enforced by the provider or a longer period is required for security, legal defense, or transaction records:

Operational Retention

Session-related website data: up to 30 days

IP logs in GDPR-governed handling contexts: up to 30 days

User account records: retained until account deletion request or as otherwise required for legal compliance, disputes, fraud prevention, or transaction records

Analytics Retention

Google Analytics 4 data is retained according to the configuration applied within Palmabook’s GA4 implementation and Google’s available retention settings. Users may request erasure of personal data where applicable by contacting partners@palmabook.com. Palmabook will evaluate and process valid requests in accordance with applicable law and technical limitations.

Regional Notes

Palmabook adapts its cookie and tracking practices based on the user’s apparent region, applicable law, and available consent signals.

European Union and United Kingdom

In the EU and UK, non-essential analytics and advertising cookies require prior opt-in consent. Palmabook therefore presents a consent mechanism before activating such technologies, except where a given technology qualifies as strictly necessary under applicable law.

California

For California residents, Palmabook provides notice of categories and purposes of cookies and similar technologies. To the extent advertising or third-party tracking constitutes sharing or sale of personal information under the California Consumer Privacy Act, as amended, Palmabook provides opt-out mechanisms, including honoring applicable Global Privacy Control signals.

Brazil

In Brazil, Palmabook seeks informed and appropriately documented consent for non-essential cookies where required by the Lei Geral de Proteção de Dados.

Canada

In Canada, Palmabook seeks meaningful consent consistent with PIPEDA expectations, taking into account the sensitivity of the data, the purpose of collection, and the user’s reasonable expectations.

Mexico

In Mexico, Palmabook provides notice regarding cookies and similar technologies consistent with transparency obligations under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares and related guidance.

Other Regions

Palmabook may use IP-based geolocation, browser signals, language settings, and consent banner logic to apply region-appropriate defaults. Such methods are not perfect, and Palmabook reserves the right to display broader privacy controls where compliance uncertainty exists.

Cookies Inventory

The table below describes representative cookies and similar technologies used on Palmabook. Because vendor implementations may change, actual cookie names, prefixes, or durations may vary over time without requiring a policy amendment, provided the category and purpose remain materially consistent.

Changes to This Policy

Palmabook may update this Accessibility and Cookies Policy from time to time to reflect changes in legal requirements, platform features, vendor relationships, tracking technologies, accessibility standards, or business operations.

If Palmabook makes a material change to cookie practices or to the way accessibility support is provided, Palmabook will use reasonable efforts to provide advance notice, including by website banner or comparable notice, at least 30 days before the change becomes effective where legally required or operationally appropriate.

Continued use of palmabook.com after an updated policy becomes effective is subject to the updated terms, except where applicable law requires renewed consent.

Contact

For accessibility inquiries, feedback, or requests for an accessible alternative, contact:

partners@palmabook.com

For privacy, cookies, data rights, or legal inquiries, contact:

partners@palmabook.com

For advertising-related inquiries, contact:

ads@palmabook.com

Palmabook will route inquiries to the appropriate internal team and respond in accordance with applicable law and operational capacity.