Guests share IDs with you. Keep them safe.
Check-in desks copy ID documents, booking engines share details with channels, and loyalty lists grow every season.
Scan your website
Read-only and free. Nothing on your site is changed.
The personal data you hold
- Guest names, phone numbers and emails
- ID documents collected at check-in
- Stay history, preferences and special requests
- Payment details from bookings
- Wi-Fi logins and CCTV footage
Where businesses like yours slip
Forms give notice and ask for consent
Booking and enquiry forms with no notice and bundled consent for offers.
Cookies wait for consent
Tracking cookies set by booking widgets before any choice is offered.
Third-party sharing disclosed in the notice
Guest details shared with booking channels and tools that the notice never names.
Privacy notice dated or versioned
A privacy notice with no date, so guests cannot tell whether it is current.
Common questions
Can we keep copies of guest IDs?
Keep them only as long as the law requires and protect them well. Copies kept forever in an inbox or a shared drive are a breach waiting to happen.
Can we send offers to past guests?
Only if they agreed to marketing, separately from the booking. Make it easy to stop.
Are booking channels our responsibility?
Data you send to channels and property software is processed on your behalf, so contracts and care in choosing them matter.
This page is general information, not legal advice.
Find out where your website stands
A free, read-only scan with plain-language findings you can act on.