Who we are

Dahomey Group LTD is the data controller. Registered company number 13309151, registered office 177 Coteford Street, London, United Kingdom, SW17 8NT. We can be contacted at [email protected] or on 07886 219479.

If you have a question about this notice or want to exercise a right, email us. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

What we collect

Please do not send us guest names, guest contact details, access codes, documents or payment details through the contact form. We do not need them to quote, and we would rather you did not.

We collect only what you choose to give us. Using the contact form provides:

• Your name.
• Your email address and phone number, so we can reply to you.
• The location of the property you want us to look at.
• The number of rooms and bathrooms, so we can quote accurately.
• Your message.
• That you ticked the box agreeing to our terms.

When you book a stay

If you book one of our properties through the booking form on the properties page, the booking is processed by Smoobu GmbH of Berlin, who act as our processor under a data processing agreement. The form asks for your first and last name, your email address, the dates you want to stay and how many people are coming.

Smoobu stores this information on our behalf, hosted on Amazon Web Services infrastructure in Germany and Ireland. We can see the bookings we need to host you, and we can reach you before and during your stay.

Smoobu publishes their own privacy notice and the full list of the sub-processors they use on their website, at smoobu.com/en/privacy-policy and smoobu.com/en/subprocessor. If you would like a copy of any booking detail they hold about you, email us and we will get it from them.

Why we use it, and our lawful basis

We do not use your data for marketing. We do not sell it, and we do not use it for automated decision-making or profiling.

We rely on the following lawful bases under Article 6 UK GDPR:

• To take steps at your request prior to entering a contract, such as preparing a quote, and to perform the contract once you accept our terms or book a stay with us. This covers your contact details, property details, message, and the booking details given to our booking provider.
• For our legitimate interests in responding to enquiries and running a cleaning and co-hosting business, and in keeping records of what we agreed. We have assessed that this does not override your rights, and you can object at any time.
• To meet a legal obligation, for example record-keeping required of a UK business.

Who we share it with

We share your details only with the service providers we need in order to reply to you and to run the site:

• Formspark, operated by Trampoline Software SRL in Belgium, which delivers the contact form submissions to our inbox, acting as a processor on our instructions.
• Our hosting provider, which stores the site and its content database (PocketBase) on servers in the United Kingdom that we control.
• Smoobu GmbH of Berlin, which runs the booking form on the properties page and acts as our processor for booking data. It sets its own cookies and is not used on any other page.

We will also disclose your data if we are legally required to, for example to a law enforcement authority.

If we ever share data beyond these parties we will tell you first.

Where we store your data

This website and its content database are hosted in the United Kingdom.

Our contact form is handled by Formspark, operated by Trampoline Software SRL in Belgium. Form submissions are stored on servers in Ireland and Germany, both inside the European Economic Area.

Bookings are handled by Smoobu GmbH of Berlin, who store booking data on Amazon Web Services infrastructure in Germany and Ireland.

The UK permits transfers of personal data to the EEA without any further transfer safeguard, so none of the above requires a transfer mechanism. Where a provider of ours uses a sub-processor outside the EEA, they are responsible for putting in place their own safeguard, and both Formspark and Smoobu publish the sub-processors they use.

How long we keep it

• Enquiries that do not become bookings: 12 months from our last reply, then deleted.
• Records for bookings made through our properties, and for clients we have worked with: 6 years after the last service, because UK tax and accounting rules require us to keep them.
• Anything you ask us to delete sooner, we will delete, unless we are required to keep it.

Cookies

This website does not set any cookies of its own and runs no analytics or advertising trackers. The only exception is the properties page, where the Smoobu booking widget may set its own cookies as described above.

Your rights

Where we are acting on your personal data you have the right to ask us to:

• Give you a copy of the data we hold about you (access).
• Correct anything inaccurate (rectification).
• Delete your data where we no longer need it (erasure).
• Pause or restrict how we use it while a query is resolved (restriction).
• Pass it to another provider in a portable format (portability).
• Object to our use of it based on legitimate interests, and object to direct marketing at any time (objection).
• Withdraw consent, where we rely on consent (withdrawal).

To exercise any of these, email [email protected]. We normally respond within 30 days. You can also complain to the Information Commissioner's Office (ico.org.uk), which is the UK supervisory authority.

How we keep it safe

The site is served over HTTPS. Access to the content database is restricted, and access to a property is limited to the staff and subcontractors working on that property. No system is perfectly secure, but we keep the personal data we hold to a minimum and do not want it in the first place.

Changes to this notice

We will update this notice when what we do, or the law, changes. The version on this page is the version that applies.