Legal

Privacy policy

Draft — not yet legally reviewed. The live WordPress site’s privacy policy is dated 2021, uses generic boilerplate, and doesn’t name Havanex’s actual data processors (see docs/wordpress-audit.md §8). This draft is a structural starting point naming the systems actually in use on this project (Guesty, transactional email, analytics, consent management) and should be reviewed by a solicitor before publishing.

1. Who we are

Havanex (“we”, “us”) provides short-let accommodation booking and property management services in the UK. Contact: info@havanex.com. [Registered company details to be confirmed by Havanex.]

2. What we collect

Contact details you provide (name, email, phone), booking and stay details, property details submitted via the revenue estimator, and standard technical/usage data (only collected after cookie consent is granted — see our cookie policy).

3. How we use it

To respond to enquiries, process bookings (via our booking partner, Guesty), provide property management services, and — only with consent — for analytics and marketing.

4. Who we share it with

Service providers who process data on our behalf: Guesty (bookings/listings), our email provider, our CRM, and our analytics/consent providers once connected — see docs/integration-requirements.md for the current list of systems in use.

5. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data. Contact info@havanex.com to exercise these rights. [ICO registration number to be confirmed by Havanex.]

6. Data retention & security

We retain personal data only as long as needed for the purposes above, and take reasonable technical and organisational measures to protect it.

7. Changes

We’ll update this policy as our data practices change and note the date of the most recent revision.