Privacy Policy

The data controller is Join Estately Ltd (Company No. 17327738), registered at Flat 5, 74 Gloucester Street, London SW1V 4EF, United Kingdom ("Estately", "we", "us"). For any question about this policy or your personal data, contact us at hello@joinestately.com. If we are required to appoint a data protection officer or an EU representative, their details will be published here.

We collect the following categories of personal data:

• Account and profile data — your name, email address and password (stored in hashed form by our authentication provider). If you sign in with Google, we receive your name, email address and profile picture from Google. Hosts additionally provide an estate name and country.
• Booking and payment data — the experiences you book, dates, party size, amounts paid and booking status. Payments are processed by Stripe: your card details are entered directly into Stripe's checkout and never touch Estately's servers. We receive only confirmation of payment and limited metadata (such as amount and payment status).
• Messages — the content of messages exchanged between guests and hosts through the platform, which we store to deliver the messaging service and to help resolve disputes.
• Content hosts upload — photographs and descriptions of estates and experiences, which are published on the platform.
• Technical data — IP address, device and browser information, and server logs generated when you use the site, used for security and to keep the service running.

Under UK GDPR (and, where it applies, the EU GDPR), we rely on the following lawful bases:

• Performance of a contract — creating and managing your account, processing bookings and payments, enabling messaging between guests and hosts, and sending transactional emails (booking confirmations, account emails) via our email provider.
• Legitimate interests — securing the platform, preventing fraud and abuse, resolving disputes between guests and hosts, and improving the service. We balance these interests against your rights and freedoms.
• Legal obligation — keeping records we are required to keep, for example for tax and accounting purposes.
• Consent — where we ask for it (for example, optional marketing emails, if we introduce them). We currently send only transactional emails related to your account and bookings. You may withdraw consent at any time.

We use a small number of service providers ("processors") to run Estately. Each processes personal data on our instructions under a data processing agreement:

• Supabase — application hosting, database, authentication and file storage (account data, bookings, messages, uploaded photos).
• Stripe — payment processing. Stripe acts as an independent controller of the payment data you provide to it; see Stripe's own privacy policy for details.
• Resend — sending transactional email (your email address and the content of those emails).
• Google — if you choose to sign in with Google, Google processes your sign-in under its own privacy policy.

When you make a booking, we share the details a host needs to provide the experience — your name, party size, dates and any messages you send them. Hosts must use this information only to deliver the experience. We may also disclose data where the law requires it, or in connection with a sale or reorganisation of our business (in which case this policy will continue to apply).

We do not sell personal data.

Some of our providers store or process data outside the UK and the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards recognised under UK GDPR — such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or EU Standard Contractual Clauses — so that your data receives an equivalent standard of protection.

We keep personal data only as long as we need it for the purposes above: account data for as long as your account exists (and for a short period afterwards to handle queries); booking and payment records for up to six years after the transaction, to meet tax, accounting and legal requirements; messages for as long as your account exists, to support the service and resolve disputes; and server logs for a short rolling period. When data is no longer needed, we delete or anonymise it.

Under UK GDPR (and EU GDPR where applicable), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive a portable copy of data you provided to us;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hello@joinestately.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you live in the EEA, you may also complain to your local supervisory authority.

Estately uses only functional cookies that are strictly necessary for the site to work: a session cookie that keeps you signed in, and a small preference cookie that remembers interface state (such as whether a sidebar is open). We do not use advertising cookies, analytics cookies or any third-party tracking. Because we set only strictly necessary cookies, we do not show a cookie consent banner. If that ever changes, we will update this policy and ask for your consent first.

Estately is not intended for children. You must be at least 18 years old to create an account or make a booking. We do not knowingly collect personal data from anyone under 18; if you believe we have, please contact us and we will delete it.

We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, row-level access controls in our database, and least-privilege access for our team. No system is perfectly secure, but if a breach occurs that risks your rights, we will notify you and the ICO as the law requires.

We may update this policy from time to time. The "Last updated" date at the top shows the current version. If we make material changes, we will take reasonable steps to bring them to your attention, for example by email or a notice on the site.

Questions, requests or complaints about this policy or your personal data: hello@joinestately.com, or write to Join Estately Ltd (Company No. 17327738), Flat 5, 74 Gloucester Street, London SW1V 4EF, United Kingdom.