Privacy notice

This notice explains how Gary Christopher Davies trading as HOST ("HOST", "we", "us") handles personal information when you use hostcityliving.com.

Who controls your information

Gary Christopher Davies trading as HOST is the data controller. Privacy enquiries can be sent to hostplatform.admin@gmail.com.

Information we collect

• Account information, including your email address and profile details.
• Authentication and security information, including login events, sessions, passkeys and recovery activity.
• Booking, saved-stay, message, review and notification information you provide through HOST.
• Host and property information submitted for onboarding or compliance review.
• Payment-related identifiers and transaction status supplied by Stripe. HOST does not store complete payment-card details.
• Technical information needed to operate and protect the service, such as device, browser, IP address and request data.

Google sign-in

If you choose Google sign-in, Google supplies the basic account information required to authenticate you, normally your email address and basic profile identity. HOST does not receive your Google password.

How and why we use information

• To create accounts, authenticate users and provide requested services.
• To process and administer bookings, messages, reviews and host onboarding.
• To prevent fraud, secure accounts, investigate failures and enforce our terms.
• To meet legal, accounting, regulatory and consumer-protection obligations.
• To communicate service, verification, security and transaction information.
• To send HOST news and travel inspiration when you have explicitly subscribed. You can withdraw that consent at any time.

We rely on contractual necessity, legal obligations, legitimate interests and consent where each basis is appropriate.

Marketing communications

HOST only sends optional news, destination ideas and offers when you actively subscribe. Subscription consent is separate from accepting the terms or making a booking. You may withdraw consent at any time by contacting us; an automated unsubscribe option will also be included in marketing messages before they are sent.

Service providers and disclosures

We use carefully selected providers to operate HOST, including Google for optional authentication, Vercel for application hosting, Resend for transactional email, Stripe for payment services, and database, security and infrastructure providers. Information may also be disclosed when required by law or to establish, exercise or defend legal claims.

International processing

Some providers may process information outside the United Kingdom. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

Retention

We keep information only for as long as needed for the purposes described above, including security, dispute, accounting and legal requirements. Retention periods vary according to the record and applicable obligations.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, receive portable information, and withdraw consent. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and local storage

HOST uses essential authentication and security technologies needed for sign-in, account protection and core service operation. Any future non-essential analytics or marketing technologies will require the appropriate notice and consent controls before use.

Changes

We may update this notice as HOST develops. The effective date above identifies the current version.