1. Who We Are

SpaceFind provides a marketplace and operating platform for listing, managing, discovering, and booking spaces. For the purposes of UK data protection law, SpaceFind is the controller of personal data collected and used through the platform, unless we tell you otherwise.

You can contact us at support@spacefind.co.uk about this Privacy Policy or your personal data rights.

2. Information We Collect

• Account information, such as name, email address, phone number, password credentials, profile details, and user role.
• Owner and listing information, such as property names, addresses, location data, descriptions, amenities, pricing, availability, images, access notes, house rules, and business details.
• Booking information, such as dates, times, booking type, guest count, pricing, deposits, payment status, cancellation status, contracts, and booking communications.
• Payment and payout information, such as Stripe customer IDs, payment intent IDs, connected account IDs, refund IDs, transaction status, card brand, last four digits, and billing details. We do not store full card numbers.
• Identity, compliance, and support information, where needed for safety, fraud prevention, owner onboarding, payment compliance, dispute handling, or customer support.
• Usage, device, and analytics information, such as IP address, browser, device type, pages viewed, searches, referral pages, timestamps, clicks, and diagnostic logs.
• Marketing preferences, lead forms, survey responses, and communications you send to us.

3. How We Use Information

• To create and manage accounts, listings, bookings, payments, payouts, refunds, deposits, contracts, messages, reviews, and customer support.
• To show relevant spaces, search results, property details, availability, pricing, and booking options.
• To verify users, prevent fraud, protect safety, enforce our Terms, resolve disputes, and detect misuse of the platform.
• To send transactional messages, booking updates, service notices, support replies, and account alerts.
• To improve SpaceFind, test and develop features, monitor performance, analyse usage, and understand marketplace demand.
• To send marketing messages where permitted by law and in line with your preferences.
• To comply with legal, tax, accounting, regulatory, audit, payment, and security obligations.

4. Legal Bases

Where UK GDPR applies, we rely on different legal bases depending on the context. These may include performing a contract with you, taking steps before entering a contract, complying with legal obligations, protecting legitimate interests, consent, and protecting vital interests in limited safety situations.

Our legitimate interests include operating a safe marketplace, improving the platform, preventing fraud, supporting users, managing owner and renter relationships, and protecting SpaceFind's rights and business.

5. How We Share Information

• Between owners and renters where needed for enquiries, bookings, access, support, dispute resolution, and confirmed use of a space.
• With payment providers such as Stripe for payment processing, payouts, refunds, fraud checks, connected account onboarding, and compliance.
• With service providers that support hosting, database infrastructure, authentication, email, analytics, address lookup, mapping, document workflows, customer support, security, and monitoring.
• With professional advisers, insurers, regulators, courts, law enforcement, payment networks, or other parties where required or appropriate for legal, safety, fraud, chargeback, or compliance reasons.
• With a buyer, investor, or successor if SpaceFind is involved in a merger, acquisition, investment, restructuring, or asset sale.
• With your consent or at your direction.

6. Storage and Analytics

SpaceFind uses essential browser storage for authentication, security, and preferences needed to make the platform work.

We also use optional first-party analytics to create aggregate statistics about marketplace use, such as which types of spaces people browse and which journeys result in a genuine enquiry. This uses a random, short-lived session identifier. We do not use this information to build advertising profiles, sell behavioural data, or follow people around the internet.

Google advertising measurement cookies are off until you allow them. Before you choose, Google may receive limited cookieless signals about visits, successful enquiries and confirmed paid bookings, including opaque transaction references and GBP booking values. Advertising storage, user-data consent, analytics storage and personalised advertising remain denied, and advertising data redaction is enabled. These signals do not include your name, email, phone number or enquiry text. If you allow measurement, Google may use advertising measurement cookies to attribute outcomes to ads. Rejecting or withdrawing measurement stops new enquiry and booking conversion signals from this browser. You can change your choice in the control below. Meta advertising tracking and personalised advertising remain disabled. Cookieless signals do not guarantee that Google can attribute a conversion to an ad.

You may object to optional first-party analytics at any time using the control below. Turning it off stops new optional marketplace analytics events and removes the analytics session identifier from this browser. It does not remove account, enquiry, booking, payment, safety, or other operational records that SpaceFind needs to provide the service or meet legal obligations.

7. Retention

We keep personal data for as long as needed to provide SpaceFind, meet legal and accounting obligations, resolve disputes, enforce agreements, prevent fraud, and maintain reliable records.

Retention periods vary by data type. For example, booking, payment, tax, contract, and compliance records may be kept longer than general marketing preferences or diagnostic logs.

8. Security

We use technical and organisational measures designed to protect personal data, including access controls, secure infrastructure, encryption in transit where appropriate, monitoring, and vendor controls.

No internet service is completely secure. Please use a strong password, keep login details confidential, and tell us promptly if you believe your account has been compromised.

9. International Transfers

Some providers that help us operate SpaceFind may process data outside the UK or European Economic Area. Where required, we use appropriate safeguards, such as adequacy decisions, standard contractual clauses, or equivalent protections.

10. Your Rights

• You may have rights to access, correct, delete, restrict, or object to the use of your personal data.
• You may have the right to request data portability or withdraw consent where processing is based on consent.
• You may object to direct marketing at any time.
• You can raise a complaint with the UK Information Commissioner's Office, but we would appreciate the chance to help first.

11. Children

SpaceFind is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us.

12. Changes to This Policy

We may update this Privacy Policy as SpaceFind develops, our providers change, or legal requirements evolve. We will post the updated policy with a new last updated date and provide additional notice where appropriate.