Privacy Policy

Last updated: January 2025

1. Introduction

GuestScreener ("we", "our", "us") takes privacy and data protection seriously. This Privacy Policy explains how personal data is collected, processed, stored, and deleted when using the GuestScreener platform.

We comply with the UK GDPR and applicable data protection laws.

2. Who This Policy Applies To

This policy applies to:

  • Guests who submit information via GuestScreener
  • Hosts who use GuestScreener to request and review information

3. Personal Data We Collect

Depending on how GuestScreener is used, we may process:

Guest data

  • Name and booking reference
  • Images of government-issued ID documents
  • Selfie images submitted for confirmation
  • Contact details provided via the booking

Host data

  • Name and contact details
  • Property and booking metadata
  • Screening configuration preferences

We do not:

  • Create biometric identifiers
  • Store facial recognition templates
  • Use data for marketing profiling
  • Perform cross-platform identity tracking

4. How Data Is Used

Personal data is processed solely to:

  • Enable hosts to screen guests before check-in
  • Perform basic image quality checks (e.g. blur, brightness, face presence)
  • Compare submitted images for confirmation purposes
  • Support optional deposit workflows
  • Maintain platform security and prevent misuse

Data is not used for automated decision-making that produces legal effects.

5. Legal Basis for Processing

We rely primarily on legitimate interests (Article 6(1)(f) UK GDPR), including:

  • Fraud prevention
  • Property protection
  • Risk reduction for hosts

Where required, consent may be obtained to improve transparency.

6. Data Retention

GuestScreener applies strict retention limits.

By default:

  • Guest ID and selfie images are retained only for a short period after checkout
  • Data is automatically deleted once the retention window expires

Hosts may:

  • Request earlier deletion
  • Configure shorter retention periods

Guests may request deletion at any time unless retention is required for legal reasons.

7. Data Sharing and Processors

Data may be shared with:

  • The host who requested screening
  • Secure hosting and storage providers
  • Payment providers (e.g. Stripe) for deposit handling

We do not sell personal data or share it for advertising purposes.

8. Data Security

We use appropriate technical and organisational measures, including:

  • Encrypted storage
  • Restricted access
  • Secure infrastructure providers

No system is completely risk-free, but we take reasonable steps to protect data.

9. Your Rights

Individuals have the right to:

  • Access their data
  • Request correction or deletion
  • Object to certain processing
  • Lodge a complaint with the ICO

Requests can be made through the platform or via contact details provided.