Legal

Privacy policy

This page is maintained by the RoomRack Guest Club team to explain how personal data is handled on this website and in the product. It is a plain-language summary, not a certification.

Website visitors

What we collect

The details you submit in a demo or contact form: name, work email, hotel name, property size and your message.

Why

Only to answer your request and, if you become a customer, to set up your account. We do not sell or share it with advertisers.

How long

Enquiries are kept while the conversation is relevant and deleted on request at any time.

Hotel customers and their guests

Controller and processor

The hotel is the controller of its guest data. Guest Club processes it on the hotel's instructions to operate the guest club.

What is processed

Guest identity fields needed for membership, stay records used to award points, and programme activity such as redemptions.

Access boundaries

Data is scoped to the hotel's organisation and properties and enforced on the server. Other customers cannot access it.

Retention and deletion

Guest records are retained while the club is active. Deletion and export requests are supported and confirmed to the hotel.

Your rights

Access, correction, deletion

Guests should contact the hotel they stayed with; the hotel can action the request in Guest Club or ask us to.

Contact

Write to us through the contact page and mark your message as a privacy request. We reply within one working day.

Need a data processing agreement?

Ask us for the current DPA and subprocessor list and we'll send it before you sign anything.