Your privacy.

1. Who is responsible for your data

AI Hospitality Guide is run by Robert Godwin. Contact: hello@aihospitalityguide.com. Robert Godwin is the controller of the personal data described in this notice. This notice covers our website, accounts, purchases, downloads, messages and optional marketing emails. We handle personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What we collect

• Account details: your email address, sign-in details and account identifier. Your profile may include your name and property name. Passwords and sign-in sessions are handled by our authentication service.
• Order details: information from Stripe such as your name when provided, email, product, amount, currency, purchase date, payment reference and refund status. Stripe handles card payments. We never see full card numbers.
• Messages: your name, email, any property or topic you provide, your message and our replies.
• Marketing subscriptions: your email, any name you provide, signup source, subscription dates and unsubscribe status.
• First-party page view counts: the page path and time of the view. Our page view tracker does not store an IP address, user agent, account identifier or other personal identifier. It uses no cookies or browser identifiers and excludes account, admin and checkout pages.
• Download counts: the type of file, its guide or department and the time of the download. If you are signed in, the event can include your account identifier. Download logging does not store your email or IP address and sets no tracking cookie.

Our hosting and payment providers may process technical information needed to deliver and secure their services. We do not receive guest information from your hotel systems through these guides.

3. Why we use it

• Contract: to create and manage your account, process orders, provide downloads, deal with refunds and send the service emails needed for these activities.
• Legal obligation: to keep the tax and accounting records required by UK law and respond to lawful requests.
• Legitimate interests: to answer enquiries, keep the service secure, prevent fraud and understand which pages and downloads are used. We consider your privacy and rights when relying on this basis.
• Consent: to send marketing emails you choose to receive. You can withdraw consent at any time using the unsubscribe link or by emailing us. Withdrawal does not affect processing that was lawful before you withdrew.

We do not sell your personal data. Buying a guide or sending a message does not, by itself, sign you up for marketing emails.

4. The services we use

• Lovable Cloud: website hosting, the database and account sign-in services.
• Stripe: payment processing and payment security. Stripe may also act as a controller for its own legal and fraud-prevention duties.
• Lovable's managed email delivery service: account, order, download and enquiry emails, and marketing emails where you have consented.
• Google, when you choose Google sign-in: Google authenticates your Google account. Sign-in is connected through Lovable's managed sign-in service to our account service. Google handles its own account data under its privacy policy.

We share the information needed for these services. Providers may use their own service providers. You can ask us for more information about the services involved in handling your data.

5. International transfers

The services we use may process data outside the UK. UK data protection law requires a valid basis for restricted transfers. This can be a UK adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU standard contractual clauses, with any further measures required. The applicable basis depends on the provider and destination. Email us to ask about the safeguards applicable to your data or to request a copy.

6. How long we keep it

• Orders and payment records: for as long as UK tax law requires.
• Accounts: until you ask us to close your account. Closing it does not remove records we must keep by law.
• Enquiries: up to 24 months after our last contact.
• Marketing details: until you unsubscribe or ask us to remove them. We may keep a limited record of your opt-out so we do not send unwanted marketing.
• Security and usage records: for as long as needed for the purposes above, subject to review. Records linked to an account are personal data and are covered by your rights below.

7. Your rights

You can ask to access, correct or delete your personal data. Where the law provides, you can ask us to restrict processing, object to processing based on legitimate interests or receive your data in a portable format. You can withdraw marketing consent at any time. Some rights have exceptions, such as records we must keep by law.

Email hello@aihospitalityguide.com to use your rights or ask a data protection question. We may need to confirm your identity. We will reply within one month. If the law allows extra time for a complex request, we will explain this within that month.

You can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. You do not have to contact us first.

8. Cookies and browser storage

Sign-in and payment access use necessary browser storage. Our first-party usage counts do not set tracking cookies. Read our cookie notice for details.

9. Changes to this notice

We will update the date above when this notice changes. Contact us if you have questions about how your information is used.