Privacy Policy
Last Updated: January 2026
🔐 1. Data Collection
In accordance with the Data Protection Act (DPA) and
GDPR, this Hotel Management System collects only the
minimum personal data required to provide booking services.
- Personal Identifiers: Name, email address
- Account Data: Login credentials (hashed)
- Booking Data: Dates, room type, guests, price
- Payment Status: Paid / Pending (no card storage)
🎯 2. Purpose of Processing
Your data is used strictly to:
- Process hotel bookings
- Send booking confirmations & receipts
- Provide customer support
We do not sell, rent, or use your data for advertising or profiling.
⚖️ 3. Legal Basis for Processing
- Contract: To fulfill hotel bookings
- Consent: When you submit forms
- Legal Obligation: For record keeping
🗑️ 4. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account (Right to Erasure)
- Restrict or object to processing
Deleting your account removes all associated bookings permanently.
⏳ 5. Data Retention
We retain your data only for as long as needed to fulfill bookings and
legal obligations. Inactive accounts may be removed after a defined period.
🍪 6. Cookies & Sessions
We use session cookies to maintain login state and protect against CSRF attacks.
No tracking or advertising cookies are used.
🔗 7. Third-Party Services
We use secure third-party services for essential operations such as:
- Email delivery (Flask-Mail)
- Payment processing (if enabled)
All third parties comply with data protection regulations.
🛡️ 8. Security Measures
- Password Hashing: PBKDF2 with salt
- CSRF Protection: Token-based validation
- Rate Limiting: Login & reset protection
- RBAC: Admin vs User roles
📩 9. Contact
For any privacy-related concerns, contact us at:
privacy@yourhotelapp.com