Privacy Policy

1. Who is responsible for your data

We act as the data controller for the personal data processed through the platform.

Providers act as separate controllers for the data they receive to fulfil your booking or order.

2. Data we collect

Account data: name, email address, phone number, role, and profile details you supply.

Transaction data: bookings, orders, invoices, and payment status. Full card numbers are handled by our payment provider and never reach our servers.

Usage data: pages viewed, searches, device and browser information, and approximate location derived from your IP address.

3. Why we use your data and on what basis

To perform our contract with you: creating your account, processing bookings, orders, payments, and invoices.

For our legitimate interests: securing the platform, preventing fraud, and improving the service.

To meet legal obligations: accounting, tax, and record-keeping duties.

With your consent: marketing messages and non-essential cookies, which you can withdraw at any time.

4. Who we share data with

Providers receive the data needed to fulfil your reservation or order.

Service providers — payment, hosting, email, and analytics — process data on our behalf under contract.

Authorities, where we are legally required to disclose. We do not sell your personal data.

5. International transfers

Some processors operate outside your country. Where that happens, transfers rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep data

Account data is kept while your account is active and for a limited period afterwards.

Transaction records are retained for the period required by accounting and tax law.

7. Your rights

You may request access to your data, correction, erasure, restriction, portability, and object to processing based on legitimate interests.

You can withdraw consent at any time and lodge a complaint with your data protection authority.

8. Cookies and similar technologies

Essential cookies keep you signed in and secure the platform. Analytics and marketing cookies are used only with your consent.

You can change your preferences at any time in your browser or through the cookie settings.

9. Security

We apply technical and organisational measures — encryption in transit, access controls, and audit logging — proportionate to the risk.

No system is perfectly secure; tell us immediately if you suspect your account has been compromised.

10. Children

The platform is not intended for people under 18 and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. Material changes are announced in advance and the updated date is shown above.

12. Cookies

Necessary cookies (sign-in session, security, language, your consent choice) and preference cookies (display choices you make) are always active: they only keep the site working and are never shared.

Audience measurement cookies are only set if you accept them. Your choice is kept for 6 months; you can change it at any time from “Manage cookies”, at the bottom of public pages or in the sidebar of your account.