Privacy notice

Template, have a lawyer review. This is a starter draft, not legal advice. Fill in every [bracketed] item and have a qualified lawyer check it before you take any payments.

Last updated: [date]

Who we are

HostFixList is operated by [legal name of business or sole trader], [registered address], [company/registration number if any]. Contact: hello@hostfixlist.com. We are the data controller for the personal data described here.

What we collect

What you type into the reservation/order form: email, first name (optional), platform, listing link or text, comparables, notes, and your choices.
Emails you send us.
When payments are switched on: payment status and the amount. Card details are handled by Stripe and never reach us.

Please don't send guest names, guest messages or other guests' personal data. If you do, we delete them.

Why we use it, and the legal basis

To reserve, prepare and deliver your audit: to take steps at your request before a contract, and to perform that contract.
To email you about your reservation or order: same basis.
To keep records required by tax law: legal obligation.

We don't sell your data, use advertising trackers or send marketing emails without your separate consent.

Who processes it for us

Form provider: [Formspree / Netlify Forms / other], to receive form submissions.
Hosting: [Netlify / Cloudflare Pages].
Email: [your email provider].
Payments, when enabled: Stripe.
Drafting help: [AI provider], used on the listing text you send, not on guest data.

Some of these providers may process data outside the EU/EEA under [standard contractual clauses / adequacy decisions]; [confirm for each provider].

How long we keep it

Reservations that don't become orders: [e.g. 6 months]. Orders and reports: [e.g. 12 months], and invoices for as long as tax law requires [e.g. 6 years].

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, or object to how it's used, by emailing hello@hostfixlist.com. You can also complain to your data protection authority: [for Cyprus, the Commissioner for Personal Data Protection; confirm for your place of establishment].

Cookies

This site doesn't set cookies or use analytics. [Update this section if you add any.]