Legal

Privacy Policy

Effective [EFFECTIVE DATE] · Last updated [LAST UPDATED]

This policy explains what personal data Homadic collects, how and why we use it, who we share it with, and the rights you have over it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are. Homadic is a directory that helps remote workers find stays that are suitable for work, and helps hosts get their properties certified and listed. This policy is provided by [COMPANY LEGAL NAME] (“Homadic”, “we”, “us”), a company registered in [England & Wales] under company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS]. We are the data controller for the personal data described here. Our ICO registration number is [ICO REGISTRATION NUMBER].

01Information we collect

We collect personal data in three ways.

a. Information you give us

  • Account details — when you create an account we collect your name, email address and password (or, if you use Google sign-in, the details Google shares with us, below). To complete your profile we also ask for your phone number, profession and home-base city and country, and you may add a profile photo.
  • Booking enquiries — when you enquire about or request to book a stay, we collect your name, email, phone number, the dates and number of guests, and any message you send to the host.
  • Host applications & listings — if you apply to certify a property or ask us to list one, we collect your name and contact details and information about the property (address, listing links, workspace, connectivity and other details you provide, and any files you upload).
  • Waitlist & marketing — if you join a waitlist or subscribe to updates, we collect your email address and any preferences you give us.
  • Communications — when you contact us (for example by email), we keep a record of that correspondence.

b. Information we collect automatically

When you use the site we may collect technical and usage data — such as your device type, browser, IP address, pages viewed and general interactions — and cookies or similar technologies (see Cookies). We do not currently run third-party analytics or advertising; if we introduce them we will do so only with your consent where required, and update this policy.

c. Information from third parties

  • Google — if you choose “Continue with Google”, Google shares your name, email address and profile photo with us so we can create or access your account.
  • Public listing platforms — for “Curated” stays, we surface information from publicly available listings (for example on Airbnb or Booking.com). This is property and host information rather than data about you as a visitor.

02How and why we use it

We use your personal data for the purposes below. Under the UK GDPR we must have a lawful basis for each use; the basis we rely on is shown alongside.

  • To create and manage your account and sign you in — necessary to perform our contract with you.
  • To operate the directory and connect you with hosts — when you enquire about or book a stay, we pass your details to the relevant host so they can respond and arrange the stay. This is necessary to perform our contract and in our legitimate interests in running the service.
  • To process and review host applications and listings — necessary to perform our contract with hosts and in our legitimate interests.
  • To send service messages — such as confirmations, security notices and account or booking updates. Necessary to perform our contract.
  • To send you marketing — newsletters, offers and product updates, where you have asked to receive them. We rely on your consent, which you can withdraw at any time.
  • To improve, secure and troubleshoot the service, prevent fraud and abuse, and keep the platform safe — in our legitimate interests.
  • To comply with our legal obligations and to establish, exercise or defend legal claims.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights; you can object to this processing (see Your rights).

03Who we share it with

We do not sell your personal data. We share it only as described here.
  • Hosts — when you enquire about or book a stay, we share the details needed to arrange it (such as your name, contact details, dates and message) with that host. The host then handles the stay and any payment directly with you; see our Terms.
  • Service providers (processors) who work on our behalf — including our hosting and database provider (Supabase), our website hosting (Vercel), authentication (including Google sign-in), email delivery ([EMAIL PROVIDER]) and network/performance tools (Cloudflare). They may only process your data on our instructions and under contract.
  • Professional advisers, authorities and others where we are required to by law, to enforce our terms, or to protect the rights, safety or property of Homadic, our users or the public.
  • In a business sale or reorganisation — if Homadic is involved in a merger, acquisition or asset sale, your data may be transferred as part of that transaction, subject to this policy.

04International transfers

Some of our service providers may store or process data outside the UK. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place — such as a UK adequacy regulation, the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses — so your data receives an equivalent level of protection. You can ask us for details of the safeguards we use.

05How long we keep it

We keep your personal data only for as long as we need it for the purposes set out in this policy — for example, for as long as you have an account, and afterwards for a limited period to meet legal, accounting or dispute-resolution requirements. When we no longer need it, we securely delete or anonymise it. If you would like your account and data deleted, contact us (see below).

06Your rights

Under UK data protection law you have the right to:

  • Access a copy of the personal data we hold about you;
  • Rectify data that is inaccurate or incomplete;
  • Erase your data in certain circumstances (“right to be forgotten”);
  • Restrict or object to certain processing, including direct marketing;
  • Portability — receive certain data in a portable format;
  • Withdraw consent at any time where we rely on it (this does not affect processing already carried out).

To exercise any of these rights, email us at directors@livehomadic.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113 — though we’d appreciate the chance to help first.

07Cookies

We use cookies and similar technologies to keep the site working and remember your preferences. You can manage your choices at any time through the “Cookie preferences” link in the footer. We group cookies into:

  • Strictly necessary — needed for core features like signing in and saving stays; the site doesn’t work without these.
  • Performance — help us understand how the site is used, anonymously. We don’t currently run any; your preference is stored for the future.
  • Targeting — for cross-site personalisation. We don’t run any of these either.

08Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the ICO of any breach where the law requires.

09Children

Homadic is intended for adults and is not directed at children. You must be at least 18 to create an account. We do not knowingly collect personal data from anyone under 18; if you believe a child has provided us data, please contact us and we will delete it.

10Changes & how to contact us

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, notify you. Please check back periodically.

For any privacy question or to exercise your rights, contact [COMPANY LEGAL NAME] at directors@livehomadic.com, or by post at [REGISTERED ADDRESS].