Privacy Policy

Effective date: {{YYYY-MM-DD}}

This Privacy Policy explains how {{COMPANY_LEGAL_NAME}} (“{{BRAND}}”, “we”, “our”, or “us”) collects, uses, shares, and protects personal data when you use {{PRIMARY_DOMAIN}} (the “Platform”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable laws.

1) Controller & Contacts

Controller: {{COMPANY_LEGAL_NAME}}, {{COMPANY_REGISTERED_ADDRESS}}. Email: {{PRIVACY_EMAIL}}. If appointed, our Data Protection Officer (DPO) can be reached at {{DPO_EMAIL}}.

2) Data We Collect

  • Account & Profile: name, email, phone, company details, billing info, preferences, verification data.
  • Leads & Messaging: inquiry content, check-in dates, group size, budget, and communication metadata.
  • Listings & Usage: Listing details, media, actions taken, saved searches, device/usage data (IP, timestamps, pages viewed).
  • Payments: billing address, VAT/tax IDs; payment tokens are handled by our payment processor(s), not stored in full by us.
  • Cookies/Similar Tech: see the Cookie Policy.

3) Purposes & Legal Bases

  • Provide & operate the Platform (Art. 6(1)(b) GDPR — contract).
  • Leads & communications between Buyers and Hosts (contract; legitimate interest Art. 6(1)(f)).
  • Payments, invoices, and fraud prevention (legal obligation Art. 6(1)(c); legitimate interest).
  • Customer support & service notices (contract; legitimate interest).
  • Marketing with consent (Art. 6(1)(a)); you can withdraw consent at any time.
  • Security, debugging, and analytics (legitimate interest).
  • Compliance with law & requests from authorities (legal obligation).

4) Sharing & International Transfers

We share data with service providers (e.g., hosting, payments, analytics, support tools) under data processing agreements. When Buyers submit inquiries to Hosts, relevant details are shared with those Hosts.

Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs). Copies of relevant safeguards can be requested at {{PRIVACY_EMAIL}}.

5) Data Retention

We keep personal data only as long as necessary for the purposes set out above, including legal, accounting, or reporting requirements. Typical retention: account data for the life of the account; billing records for {{BILLING_RETENTION_YEARS}} years; lead logs for {{LEAD_LOG_RETENTION_MONTHS}} months, unless longer is required by law.

6) Security

We use technical and organizational measures appropriate to the risk (e.g., encryption in transit, access controls, backups). No method is 100% secure; users should also safeguard their credentials and devices.

7) Your Rights

Under GDPR, you may have the rights to access, rectify, erase, restrict, object, and data portability, as well as to withdraw consent and lodge a complaint with a supervisory authority. To exercise rights, contact {{PRIVACY_EMAIL}}. We may verify your identity before responding.

8) Cookies & Consent

We use cookies and similar technologies for essential functions, analytics, and (if consented) marketing. Manage preferences via the Cookie Settings. For details, see our Cookie Policy.

9) Children’s Privacy

The Platform is not directed to children under 16. If you believe a child has provided personal data, contact us to delete it.

10) Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email.

11) Contact

{{COMPANY_LEGAL_NAME}} — {{COMPANY_REGISTERED_ADDRESS}}
Email: {{PRIVACY_EMAIL}} — {{OPTIONAL_PHONE}}