Privacy Policy

1. Introduction & Our Privacy Philosophy

Guestiqo Ltd ("Guestiqo", "we", "us", or "our") provides digital guidebook solutions and hospitality technology designed for holiday rentals, boutique stays, and thoughtful property hosts.

Our core philosophy is simple: technology should ease the burden of hosting, not create unnecessary tracking. We collect only what is strictly necessary to provide and continually improve our digital guidebook platform.

2. Information We Collect

Depending on how you interact with our platform, we collect information across two distinct categories:

A. Property Hosts & Account Holders:

• Account Information: Name, email address, password hash, and property business name when registering for a host account.
• Property Guidebook Content: Welcome letters, Wi-Fi details, house rules, neighborhood dining curations, images, contact numbers, and optional in-stay extras created within the host editor.
• Billing & Subscription Data: Payment details and transaction history processed securely through PCI-compliant payment gateways (e.g., Stripe). Guestiqo does not store raw payment card numbers.

B. Guidebook Visitors & Guests:

• Session & Usage Telemetry: Aggregated, non-personally identifiable metrics such as module view counts (e.g., Wi-Fi code copied, recommendation opened) to provide hosts with guidebook engagement stats.
• Guest Interaction Submissions: Information voluntarily provided by guests during their stay, such as messages submitted via the Guest Memory Wall or orders placed through the optional bookable extras module.

3. How We Use Collected Data

We use the information we collect solely for the following legitimate business purposes:

• To provision, maintain, and deliver your digital guidebooks and host dashboard.
• To display property information, directions, house rules, and local recommendations to your guests.
• To relay guest requests (such as breakfast hamper bookings or guestbook notes) directly to the host.
• To process subscription payments and account management requests.
• To analyze high-level website traffic, detect security anomalies, and prevent fraudulent activity.
• To comply with statutory legal and tax obligations.

4. Analytics, Cookies & Tracking Technologies

Guestiqo utilizes a minimal set of analytics and utility tools to ensure site reliability, smooth navigation, and performance optimization:

• Microsoft Clarity: On our live website, we use session recordings and heatmaps to understand how visitors use pages and improve their experience.
• Guestiqo website analytics: Our own service records page paths, “Get started” clicks, button positions, referring website domains, and broad device categories. Random browser identifiers stored on your device help estimate visitors and sessions. These events do not include names, email addresses, full referrer URLs, or form contents. Browser identifiers expire after 90 days; a session ends after 30 minutes of inactivity. We respect Do Not Track and Global Privacy Control signals.
• Google Translate: Activated conditionally on-demand only when non-English translation is explicitly requested by the visitor.
• Essential Session Cookies: Maintain your host login session and remember client interface preferences (such as monthly vs. annual pricing toggles).

You may adjust your browser preferences at any time to refuse cookies or alert you when cookies are sent; however, certain features of the host management dashboard may require essential cookies to operate properly.

5. Third-Party Service Providers

We do not sell, rent, or trade your personal information. We only share data with vetted third-party infrastructure providers who assist in operating our platform under strict confidentiality agreements:

• Hosting & Edge Delivery: Cloud infrastructure providers (e.g., Vercel) delivering high-availability static assets and edge caching worldwide.
• Database & Authentication: Secure database and authentication services providing encrypted data storage at rest and in transit.
• Payment Processing: Certified payment processors handling billing with industry-standard encryption.

6. Data Security & Retention

We employ modern industry safeguards, including SSL/TLS 256-bit encryption for all data in transit, strict database access controls, and routine security reviews.

We retain your host account data and property content for as long as your account remains active. If you delete your property or terminate your subscription, we remove or anonymize your personal information from active production systems within 30 days, subject to mandatory legal or accounting retention periods.

7. Your Rights Under GDPR & UK Data Protection

Under UK and European data protection regulations (UK GDPR and EU GDPR), you maintain comprehensive rights regarding your personal information, including:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer necessary for legitimate business or statutory purposes.
• Right to Data Portability: Obtain a structured, machine-readable export of your guidebook content and account details.
• Right to Object & Restrict Processing: Object to processing based on legitimate interests or request restrictions on data processing.

To exercise any of these rights, simply reach out to our privacy coordinator at guestiqo@gmail.com.

8. Updates to This Policy

We may periodically update this Privacy Policy to reflect changes in our platform features, operational practices, or applicable legislation. When updates occur, we will revise the "Last updated" date at the top of this document and provide prominent notice on our website or via email where appropriate.