Draft for legal review. This document describes how North Hotels works today but has not yet been approved by a lawyer.

Privacy Policy

Last updated [date of approval]

Who we are

North Hotels is operated by [Registered company name], [Registered address] ("we", "us"). Contact: [hello@northhotels.com](mailto:hello@northhotels.com).

We play two roles:

  • For travel agencies that use our platform, we are responsible for their account data (we are the controller).
  • For travellers who book on an agency's website, the agency is responsible for their data and we process it on the agency's behalf (we are a processor). Hotel DEN, our own website, is the exception: there we are the controller.

What we collect

  • Agency accounts: name, work email, password (stored only as a secure hash), agency name, website settings, logo and images you upload, domains, plan and billing status.
  • Traveller accounts and bookings: name, email, password hash, phone number, guests' names, travel dates, hotel and room booked, special requests, the amount paid and booking references.
  • Payments: card payments are handled by Stripe. We never see or store full card numbers. We keep payment references and amounts.
  • Technical data: IP address (also passed to the hotel supplier when a booking is made, as it requires), request logs for security, and cookies (see below).
  • Sales enquiries: details you send through our demo, contact or launch-partner forms.

Why we use it

To provide and secure the service, create and manage bookings with hotels through our hotel supplier, take payments, run subscriptions and billing, send booking and account emails, answer enquiries, prevent fraud and abuse, and meet legal obligations.

Who we share it with

  • Our hotel supplier (guest names, booking contact details, stay details) so the hotel can confirm the booking.
  • Stripe for payments and subscriptions. Agencies receive payments on their own Stripe accounts.
  • Our email provider to send account and booking emails.
  • Our hosting providers, under contract.
  • The agency whose website a traveller booked on.

We do not sell personal data.

Cookies

We use strictly necessary cookies to keep you signed in and to show previews. If analytics are enabled on a website, they only run after you click "Accept" in the cookie banner; you can change your mind by clearing your cookies.

How long we keep data

Account data for as long as the account is open, booking and payment records for as long as tax and accounting law requires ([retention period]), and enquiries for up to [period].

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, or object to some uses. Contact [hello@northhotels.com](mailto:hello@northhotels.com). If you booked on an agency's website, you can also contact that agency. You can complain to your data protection authority.

International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Changes

We will post updates here and change the date above.

Privacy Policy · North Hotels