Privacy Policy

1. The short version

We collect the minimum we need to run a hospitality network: who you are, what you offer, and what happens between members. We use it to operate your account, show your profile to the right people, keep the platform safe, and - only if you agreed - send you network updates. We do not sell your data, we do not rent your email list, and we do not run third-party ad tracking on you.

2. What we collect and why

We collect three kinds of information, each for a specific purpose:

• Account data - email address, password credentials handled by our authentication provider, and the member type you choose. Purpose: create and secure your account, sign you in, and contact you about the service.
• Profile and business data - display name, headline, bio, city, website, phone number, rates, media, listings, job posts, media kits and résumé-style talent details. Purpose: publish the profile you asked us to publish and make you findable in the directory. You control what goes here.
• Activity data - bookings, applications, messages, reviews, favourites, reports and moderation outcomes. Purpose: deliver the features themselves, notify the right people, and keep an accurate record if a dispute arises.
• Technical data - IP address, device and browser information, and basic page/search usage. Purpose: security, abuse prevention, debugging and understanding which features are used.
• Communication preferences - whether you agreed to receive marketing updates, and when you accepted the terms. Purpose: proving consent and honouring your choices.

3. Our legal grounds

Where privacy law requires a legal basis, we rely on: performing our contract with you (running your account and the features you use), our legitimate interests (security, abuse prevention, improving the product), your consent (marketing emails and any optional data you choose to publish), and legal obligation (tax, accounting and lawful requests).

4. What is public and what is not

Your public profile - display name, headline, bio, city, member type, website, media, listings, rates and ratings - is visible to anyone on the internet, including search engines. Treat it as a public business page.

Your email address, password, phone number, private messages, booking details, applications and moderation reports are not public. Your phone number is only released to you and to members you choose to share it with through a booking. Administrators can access records where necessary to moderate the platform and resolve disputes.

5. Email and notifications

Service messages - booking requests and status changes, job application updates, new messages, review alerts, moderation outcomes, password resets and security notices - are part of your account. Most of these appear in the in-app notifications centre, and the essential ones may reach you by email while you have an account.

Marketing and network updates are optional and consent-based. You tell us during onboarding whether you want them, we record the date of that choice, and every newsletter carries a link to change it. Opting out is permanent unless you opt back in: we never resurrect an address that has opted out, including during member imports.

6. What we never do

• We never sell, rent or trade your personal data.
• We never share your email address with other members or with advertisers.
• We never use your private messages or booking details for advertising or profiling.
• We never add you to marketing emails without your recorded consent.
• We never publish your phone number, email or account data on a public profile.
• We never use third-party advertising or cross-site tracking pixels.

7. Who we share data with

We share only what is necessary, and only with: (a) other members, limited to what your public profile shows plus what a booking or application requires; (b) service providers who operate the platform on our behalf - cloud hosting, database, authentication and email delivery - under contracts that restrict them to our instructions; (c) professional advisers, or an acquirer if the business is sold, in which case this policy continues to apply; and (d) authorities where the law genuinely requires it or to protect someone's safety.

8. Cookies and similar technology

We use strictly necessary cookies and local storage to keep you signed in, remember your session and protect against abuse. We do not use advertising cookies or sell behavioural data. Blocking essential cookies will stop sign-in from working.

9. How long we keep data

Account, profile and activity data are kept while your account is active. After deletion we remove or anonymise personal data within 30 days, except where we must keep records longer for tax, accounting, fraud-prevention or dispute purposes, and except for encrypted backups which age out on a rolling schedule. Opt-out records are kept indefinitely so we can keep honouring them.

10. Security

Data is encrypted in transit. Access to member records is restricted by row-level database rules so members can only read and edit their own data, sensitive fields such as phone numbers are gated behind scoped server-side checks, and administrative access is limited to accounts with an explicit admin role. No system is perfectly secure; if a breach affects your data we will notify you and any regulator as required by law.

11. Your rights and choices

You can access and correct most of your data yourself from your dashboard, unpublish a listing or media kit, change your marketing preference, or ask us to delete your account entirely. Depending on where you live you may also have rights to a copy of your data, to restrict or object to certain processing, and to complain to your data protection authority. Email hello@hospihub.net and we will respond within 30 days. We will not discriminate against you for exercising these rights.

12. Children

HospiHub is for people aged 18 and over. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.

13. International transfers

Our infrastructure providers may process data in countries other than yours, including the United States. Where required, we rely on recognised transfer mechanisms such as standard contractual clauses.

14. Changes to this policy

We will post any update here with a new date, and will tell you in the product or by email when the change is material.

15. Contact

Privacy questions, data requests and deletion requests: hello@hospihub.net.