A plain account of what we collect and why.

Who we are

Guest & Gander is the controller of the personal data described in this notice. If you have any privacy questions, or want to exercise your rights, email support@guestandgander.com.

What we collect

Depending on how you use the site, we may collect:

• your name and email address
• one-time login codes and related authentication records
• session information needed to keep your account signed in securely
• the Airbnb listing URL you submit, together with preview metadata such as listing title and image
• order details, audit selections, notes, and status history
• support or contact correspondence
• basic technical information such as IP address, browser, and access times for security and troubleshooting

How we use it

We use personal data to:

• create and manage your account
• send and verify login codes
• process and fulfil audit requests
• generate, deliver, and store your reports
• communicate with you about orders, delivery, and support
• secure the site, detect misuse, and investigate suspicious activity
• keep internal records and comply with legal or accounting obligations

Our legal bases

We generally rely on the following legal bases under UK data protection law:

• Contract: where we need your data to provide the service you requested.
• Legitimate interests: where we need data to operate, secure, and improve the service sensibly.
• Legal obligation: where we must keep records or respond to lawful requests.

Who we share it with

We do not sell personal data. We may share it with service providers that help us host the site, run the database, maintain authentication, store files, process payments, or deliver email, but only where those providers are relevant to the feature in use and only on a need-to-know basis.

We may also disclose information if we are legally required to do so, or where disclosure is reasonably necessary to protect the service, investigate misuse, or enforce our terms.

How long we keep it

We keep data for as long as reasonably necessary to provide the service, maintain records, secure the site, resolve disputes, and comply with legal obligations. Some technical and security records may be retained for a reasonable period even after an account is inactive.

Cookies and essential storage

The site uses essential session and security mechanisms so that log-in and account functions work properly. We do not use the site to run advertising cookies. If that changes, this notice will be updated.

International transfers

Some service providers may process data outside the UK. Where that happens, we aim to use providers and safeguards that are appropriate under applicable data protection law.

Your rights

You may have rights to request access to, correction of, deletion of, or restriction of your personal data.

• access the personal data we hold about you
• correct inaccurate data
• request deletion where appropriate
• object to some processing or ask for restriction
• complain to the ICO if you believe your data has been handled unlawfully

To make a request, email support@guestandgander.com.

Changes to this notice

We may update this notice from time to time as the service develops. Material changes will be reflected on this page.