1. Introduction

At Proper Place, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following categories of personal data:

Account Information

Full name
Email address
Phone number (optional)
Password (encrypted)

Profile Information

Profile photo (optional)
Bio/description (optional)
Vehicle details (registration, dimensions)

Booking & Transaction Data

Booking history and preferences
Payment information (processed by Stripe — we do not store card details)
Payment authorisation and capture status (pending, confirmed, refunded)
Fund holding records associated with completed stays
Stripe Connect account identifiers (for Hosts who have completed payout onboarding)
Platform service fee records (15% of each booking, deducted from Host payouts)
Reviews and ratings

Technical Data

IP address
Device type and operating system
Browser type
Location data (when using map features, with your consent)

3. How We Use Your Information

We process your data based on the following legal bases:

Purpose	Legal Basis
Creating and managing your account	Contract performance
Processing bookings and payments	Contract performance
Facilitating payment authorisation and fund holding via Stripe (our third-party payment processor) pending Host approval and stay completion. All funds are held by Stripe, not Proper Place.	Contract performance / Legitimate interest
Sending booking confirmations and updates	Contract performance
Facilitating communication between hosts and guests	Contract performance
Preventing fraud and ensuring platform security	Legitimate interest
Sending marketing communications	Consent (you can opt out anytime)
Analytics to improve our services	Consent / Legitimate interest
Legal compliance (tax records, disputes)	Legal obligation

4. Data Retention

We retain your personal data for the following periods:

Account data: Until you delete your account, plus 30 days for backup purposes
Booking records: 7 years (required for tax and legal purposes)
Payment records: 7 years (legal requirement)
Messages: 2 years after the related booking
Technical logs: 90 days

5. Data Sharing

We share your data with the following third parties:

Stripe: Payment processing, fund holding, and host payouts via Stripe Connect Express (PCI-DSS compliant). Hosts who list on Proper Place are required to complete Stripe Connect onboarding; Stripe collects and processes identity and payout information for this purpose. All customer funds are held by Stripe — Proper Place never holds or has custody of user funds.
DigitalOcean: Cloud hosting and database services (EU/UK data centres)
Google Maps: Location and mapping services
Email service providers: For transactional emails

We do not sell your personal data to third parties. All our service providers are bound by data processing agreements and are required to protect your data in accordance with UK GDPR.

6. International Transfers

Your data is primarily stored within the UK and European Economic Area. Where we use service providers outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of all data we hold about you.

Right to Rectification

Request correction of inaccurate personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Data Portability

Receive your data in a machine-readable format.

Right to Restrict Processing

Request we limit how we use your data.

Right to Object

Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@properplace.co.uk. We will respond within one month as required by UK GDPR.

Export Your Data: You can download a copy of all your personal data directly from your account settings in the app, or by contacting us.

8. Data Security

We implement appropriate security measures including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Secure password hashing (bcrypt)
Regular security audits
Access controls and authentication
Rate limiting to prevent abuse

9. Cookies

We use cookies and similar technologies to improve your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. Children's Privacy

Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the app. The "Last updated" date at the top shows when this policy was last revised.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113

13. Contact Us

For any questions about this Privacy Policy or to exercise your data rights:

Email: privacy@properplace.co.uk
We aim to respond within 48 hours