Privacy Notice

Last updated: 30 May 2026

This Privacy Notice explains how Host Haven Group Ltd, a company incorporated in England & Wales (company number 17255321), trading as "Host Haven" ("we", "us", "our"), collects, uses and protects your personal data when you use our website and application (the "Service"). Host Haven Group Ltd is the data controller for the personal data described below.

1. Personal data we collect

Account data — name, email address, password (hashed), profile details.
Property & booking data — property details and any guest information you choose to add (names, contact details, booking dates, messages).
Support data — messages, attachments and metadata when you contact us.
Usage & device data — log data, device identifiers, IP address, browser type, pages visited, feature interactions.
Marketing data — preferences and email engagement, where applicable.

Payment details (card number, billing address) are collected directly by our payment provider Paddle and are not stored by Host Haven.

2. How and why we use your data

Provide the Service — create your account, run your properties, send transactional emails (legal basis: performance of a contract).
Customer support — respond to questions and troubleshoot (legitimate interests / contract).
Security & fraud prevention — detect and prevent abuse, secure our systems (legitimate interests / legal obligation).
Product improvement & analytics — understand how the Service is used so we can improve it (legitimate interests).
Marketing — send updates and offers you can opt out of at any time (consent or legitimate interests, depending on your jurisdiction).
Compliance — meet legal, tax and regulatory obligations (legal obligation).

3. Who we share data with

Service providers / subprocessors — cloud hosting, database, email delivery, analytics and customer support tooling, acting on our instructions under written agreements.
Merchant of Record (Paddle) — for sale of subscriptions, subscription management, payments, tax compliance and invoicing.
Professional advisers — legal, accounting and audit, when necessary.
Authorities — where required by law or to protect our rights.

4. International transfers

Some of our service providers are located outside the UK / EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent UK transfer mechanisms.

5. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with our legal obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.

6. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
request correction or deletion;
restrict or object to processing;
request portability of your data;
withdraw consent at any time, without affecting prior processing;
lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@gethosthaven.com. We aim to respond within one month.

7. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and least-privilege practices — to protect personal data against unauthorised access, alteration, loss or disclosure.

8. Cookies

We use essential cookies to keep you signed in and the Service working, and limited analytics cookies to understand usage. You can control non-essential cookies through your browser or, where shown, our cookie banner.

9. Changes

We may update this Privacy Notice from time to time. We'll post the new version here and update the date above. Material changes will be notified in-app or by email.

10. Contact

Questions or concerns? Contact us at privacy@gethosthaven.com.