Legal
Privacy Policy
Last updated: [to be set before launch]
Draft — for legal review. The structure below is provided for a lawyer to finalize the wording before launch. Each section contains a short note describing the intended content in place of final legal text.
1. Data we collect
[Placeholder — Describe the data collected from the free self-assessment (intake form fields such as property type, location, and the answers given to each criterion) and from the paid review (the same intake fields plus optional evidence uploads — photographs and documents showing the property's practices). Include the metadata captured automatically for self-assessments (IP address, timestamp, browser, and similar technical information). ]
2. Why we collect it
[Placeholder — Explain the purposes: to score the self-assessment, to conduct and evidence the paid human review, to produce the personalized review page, to communicate about a submission, and to operate the verification lookup guests use. ]
3. Legal basis
[Placeholder — State the lawful basis under the GDPR relied on for each purpose (for example, performance of a contract for the paid review, legitimate interests for the free self-assessment and verification, and consent where evidence is uploaded). ]
4. How long we keep it
[Placeholder — Specify retention periods: how long self-assessment records, paid-review submissions and their evidence, and verified-review pages are kept, including the 24-month review refresh cycle. ]
5. Who we share it with
[Placeholder — Identify hosting and processing providers (hosting, database, file storage, and any email or payment processors) and the circumstances under which data is shared, including legal obligations. The personalized review page discloses only a limited, non-sensitive subset of review data. ]
6. Your rights
[Placeholder — List the GDPR rights: access, erasure, rectification, data portability, restriction of processing, objection, and the right to withdraw consent where consent is the basis. Explain how to exercise them. ]
7. Contact for privacy requests
[Placeholder — Direct privacy requests to info@greenshortstay.com and state the expected response time. ]
8. Note on third parties in evidence photos
[Placeholder — Explain that evidence photographs are submitted by the property owner and may incidentally show guests, neighbors, or other individuals. State how such images are used (review only, not published) and the basis on which they are processed. ]