About This Policy
We exist to help build connections between people and make travel more accessible. We are a community built on trust. A fundamental part of earning that trust means being clear about how we use your information and protecting your privacy. This Privacy Policy describes how we process personal information in relation to your use of our platform. It applies to all parties in our ecosystem: • The Platform - We provide the technical infrastructure and services • Property Owners - Those who list and manage properties on our platform • Visitors & Guests - Those who browse, book, and stay at properties We are committed to protecting the privacy of all parties and ensuring the security of personal information throughout our platform.
Information We Collect
Information You Provide
We collect information you provide when you:
- Create an account (name, email, phone number, date of birth)
- Complete a booking (payment information, guest details)
- Manage your property (listing details, availability, pricing)
- Communicate through our platform (messages, reviews, support requests)
- Verify your identity (government ID, selfie for verification)
Information We Collect Automatically
When you use our platform, we automatically collect:
- Usage Information: Pages viewed, searches, bookings, and interactions with the platform
- Device Information: IP address, browser type, operating system, device identifiers
- Location Information: Approximate location from IP address or precise location if you enable it
- Cookies and Similar Technologies: As described in our Cookie Policy
Information from Third Parties
We may receive information from:
- Identity verification and background check providers
- Payment processors and financial institutions
- Other users (reviews, referrals, co-travelers)
- Social media platforms if you connect your accounts
- Business partners and service providers
How We Use Your Information
Provide and Improve Our Services
- Enable bookings and payments between guests and hosts
- Facilitate communication between users
- Provide customer support and respond to inquiries
- Personalize your experience based on your preferences
- Improve and develop new features and services
Safety and Security
- Verify identities and authenticate accounts
- Detect and prevent fraud, spam, and abuse
- Conduct security investigations and risk assessments
- Comply with legal obligations and enforce our terms
- Protect users and the public from harm
Legal and Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and prevent illegal activities
- Resolve disputes and enforce agreements
- Protect our rights and the rights of others
Marketing and Communications
With your consent or where permitted by law, we may:
- Send promotional messages and marketing communications
- Show personalized advertisements
- Conduct surveys and research
- Analyze effectiveness of our marketing campaigns
Sharing Your Information
With Other Users
To facilitate bookings and build trust, we share certain information between users:
- Guest to Host: Name, profile photo, reviews, and verification status
- Host to Guest: Property details, host profile, house rules, and reviews
- Public Profiles: First name, profile description, and reviews are publicly visible
- After Booking: Contact information to coordinate the stay
Service Providers
We share information with trusted service providers who help us operate our platform:
- Payment processors for transaction processing
- Cloud storage and hosting providers
- Customer support and communication tools
- Analytics and performance monitoring services
- Identity verification and security services
These providers are contractually bound to protect your information and only use it for the services they provide to us.
Legal Requirements
We may disclose information when required by law or when necessary to:
- Comply with legal obligations or valid legal requests
- Protect safety and prevent illegal activities
- Defend our legal rights or respond to legal claims
- Prevent fraud or security threats
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and how it affects your information.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. The retention period depends on:
- The nature of the information and why it was collected
- Legal, tax, and regulatory requirements
- Whether there are ongoing disputes or investigations
- Our legitimate business interests
Active Accounts
We keep your account information for as long as your account is active and for a reasonable period thereafter in case you decide to use our services again.
Transactional Records
Booking and payment records are retained for at least 7 years for tax and accounting purposes, or longer if required by law.
Communications
Messages and support communications may be retained for quality assurance and to resolve disputes.
Marketing
If you opt out of marketing, we retain your opt-out preference indefinitely to respect your choice.
Your Rights
You have rights regarding your personal information, including:
Access and Portability
Request a copy of your personal information and receive it in a portable format where technically feasible.
Correction
Update or correct inaccurate information in your account or by contacting us.
Deletion
Request deletion of your personal information, subject to certain exceptions such as:
- Completing transactions or resolving disputes
- Detecting security incidents or illegal activities
- Complying with legal obligations
- Maintaining records for legitimate business purposes
Opt-Out
Opt out of:
- Marketing communications (via account settings or unsubscribe links)
- Cookies and tracking (see Cookie Policy for details)
- Sharing with certain third parties where applicable
Restriction and Objection
In certain circumstances, you may:
- Restrict how we process your information
- Object to certain processing activities
- Withdraw consent where processing is based on consent
Complaints
Lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
To exercise these rights, please contact us using the information in the Contact section below. We may verify your identity before processing your request.
Data Security
We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
- Encryption of data in transit and at rest
- Secure servers and data centers
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Monitoring for security threats and vulnerabilities
Organizational Measures
- Limited access to personal information on a need-to-know basis
- Confidentiality agreements with employees and contractors
- Regular security training for our team
- Incident response and data breach procedures
Your Role in Security: Help protect your account by using a strong password, enabling two-factor authentication where available, and being cautious about phishing attempts. Never share your login credentials with others.
International Transfers
As we operate globally, your information may be transferred to and processed in countries other than where you live. These countries may have different data protection laws than your country.
Safeguards
When we transfer information internationally, we use appropriate safeguards such as:
- Standard contractual clauses approved by regulatory authorities
- Adequacy decisions recognizing certain countries provide adequate protection
- Your consent to the transfer where required
- Other mechanisms recognized under applicable law
Storage Locations
Your data may be stored in secure data centers located in:
- European Union
- United States
- Other countries where we or our service providers operate
Regardless of where your information is processed, we apply the same protections described in this policy. We also comply with applicable legal frameworks relating to the transfer of data.
Children's Privacy
Our platform is not directed to children under 18 years of age, and we do not knowingly collect personal information from children.
Age Requirements
You must be at least 18 years old to create an account and use our services. By using our platform, you confirm that you meet this age requirement.
Information About Children
While we don't collect information directly from children, adults may provide information about children when:
- Making bookings that include children as guests
- Listing family-friendly properties
- Mentioning children in reviews or descriptions
Adults providing such information must have the legal authority to do so.
If we learn that we have collected personal information from a child under 18, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notification of Changes
When we make material changes, we will:
- Update the "Last Updated" date at the bottom of this policy
- Notify you by email or through the platform
- Provide notice at least 30 days before the changes take effect
- Give you the opportunity to review the changes
Your Choices
If you disagree with the updated policy, you may:
- Close your account before the changes take effect
- Contact us with your concerns
- Adjust your privacy settings where applicable
Continued use of our platform after the changes take effect means you accept the updated Privacy Policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Data Protection Officer
Postal Address
Privacy Team
Cottage Booking
Vanadisplan 8
11331 Stockholm, Sweden
Response Time
We aim to respond to all privacy-related inquiries within 30 days. For complex requests, we may need additional time and will keep you informed of our progress.
Supervisory Authority
If you are in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.