Legal

Privacy policy

How Aloaha Limited processes personal data when you use Guestbud.

Controller and processor

For the website, account sign-up and contact form, Aloaha Limited (Malta) is the controller. For guest data that hosts collect through their guest portal, the host is the controller and Aloaha Limited processes the data on the host's behalf.

What we process

• Hosts: name, email, phone, company data, sign-in events.
• Guests (on behalf of hosts): booking data, check-in data (name, date of birth, nationality, address, ID document data, co-travellers, signature), payment status, arrival time.
• Contact form: the details you enter.
• Technical logs: IP address and request data for security, kept briefly.

Payments

Payments are processed by Revolut Ltd under the host's merchant account. We never receive card numbers.

Retention

Data is kept while needed for the stay and legal duties (for example tax returns and, for German properties, the Meldeschein for one year after departure), then deleted.

Your rights

You can request access, correction, erasure, restriction, portability and object to processing. Guests should contact their host first. Contact us at info@aloaha.com. You can also complain to your data protection authority (in Malta: the IDPC).

Cookies

We only use strictly necessary cookies for sign-in sessions. No tracking or advertising cookies. Fonts are served from our own servers.