Privacy Policy

Last updated: August 2, 2026

This policy explains what personal data we collect on HostInTenerife.com, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. What data we collect

Name and email address (when creating an account), booking data (property, dates, amount), and — if you choose to sign in via Google or Facebook — the basic profile information provided by those providers (name, email). We never store full payment card data — this is processed directly by Stripe, our PCI-DSS certified payment processor.

2. Why we collect this data

To create and manage your account, to process and confirm bookings, to calculate commissions and payouts to hosts, and to display your booking history and your own referral code on your account page.

3. Who we share data with

With Supabase (database hosting and authentication) and Stripe (payment processing), both contracted sub-processors that comply with GDPR requirements. A property's Host sees a guest's name, email, and booking details only for bookings made at their property. We do not sell or share data with third parties for marketing purposes.

4. How long we keep your data

Account data and booking history are kept for as long as the account is active, plus the period required by applicable tax/accounting obligations. You may request account deletion at any time, per the section below.

5. Your rights (GDPR)

You have the right of access to your data, the right of rectification, the right of erasure ("the right to be forgotten"), the right to data portability, and the right to object to processing. To exercise any of these rights, write to us at the contact address below.

6. Cookies

We use an essential technical cookie to keep your authentication session, and one for the interface's language preference. We currently do not use analytics or advertising cookies. If this changes, the consent banner shown on first visit will be updated accordingly.

7. Contact

For any question about privacy or to exercise your GDPR rights, write to us using the contact address published on the site.

This text is for general informational purposes only and does not constitute legal advice. We recommend review by a lawyer specialized in data protection before full commercial launch.