Privacy Policy

Last updated: May 2026

Who we are

Bloqq Ltd ("Bloqq", "we", "us", "our") is a serviced accommodation management company operating across the United Kingdom and Ireland, with EU expansion underway in 2026. Our registered office is at Av del Portal de l'Angel, 40, Ciutat Vella, 08002 Barcelona, Spain.

For the purposes of the UK GDPR and the EU GDPR, Bloqq is the data controller for the personal data described in this policy.

Scope

This policy explains how we collect, use, share and protect personal data when you (i) visit this website, (ii) make or enquire about a booking with us, (iii) interact with us as a property owner, partner or supplier, or (iv) stay in a property we manage.

What we collect

Depending on how you interact with us, we may collect:

Identity & contact details - name, email, phone number, postal address, date of birth (where required for ID verification), nationality
Booking and stay details - property booked, dates, guest names, length of stay, special requests, communications related to your stay
Identity verification data - passport or ID document (held briefly for verification, then deleted), selfie verification where applicable
Payment information - handled by our payment processor (Stripe). We do not store full card details on our own systems
Property owner data - for owners we work with: company name, contact details, bank account for payouts, property information
Correspondence - messages you send us via our website, email, booking platforms or chat
Technical data - IP address, browser type, device information, referring URL, pages viewed, collected via cookies and analytics
Cookies and similar - see our Cookie Policy

How we use your data and our legal bases

To fulfil your booking (contract): processing payments, sending confirmations, providing check-in details, responding to your queries during your stay
To verify your identity (legal obligation / legitimate interests): screening guests, complying with local short-let registration regimes and anti-fraud requirements
To run our business (legitimate interests): managing our relationships with owners, suppliers and partners; paying out revenue; producing performance reports
To improve our service (legitimate interests): analysing how the website is used, monitoring service quality and gathering feedback
To send marketing communications (consent, or legitimate interests for B2B contacts): sending you updates you have opted in to. You can unsubscribe at any time
To comply with law (legal obligation): responding to lawful requests from regulators, tax authorities or police

Who we share it with

We share data only where necessary, and only with parties bound by appropriate contractual obligations. These include:

Booking channels - Airbnb, Booking.com and other distribution partners through which your stay was booked
Our property management system - Guesty (Guesty Inc.) for booking, calendar and inbox management
Payment processor - Stripe, Inc. for card processing
Email and communications providers - Resend and similar transactional email services
Hosting and infrastructure - Vercel Inc. for website hosting; Anthropic PBC where AI-assisted message drafting is used (no personal data is used to train models)
Identity and screening providers - for guest vetting and ID checks
Property owners - for the property you stay in, the owner may receive limited stay details (e.g. dates and guest count). Owners are bound by confidentiality terms
Professional advisors - accountants, auditors, insurers, lawyers where reasonably necessary
Authorities - where required by law (e.g. police, tax authorities, local short-let registration)

We do not sell your personal data.

International transfers

Some of our service providers are based outside the UK and the EEA (for example in the United States). Where we transfer your data outside the UK or EEA, we rely on lawful transfer mechanisms - typically the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision.

How long we keep your data

Booking and stay records: typically 7 years to meet tax and regulatory requirements
ID verification documents: deleted within 30 days of stay completion unless we are required to retain longer
Marketing contact data: until you unsubscribe, after which it is removed within 30 days
Enquiry data where no booking is made: 24 months, then deleted

Your rights

Under UK and EU data protection law you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted (where applicable)
Object to processing based on our legitimate interests
Restrict processing in certain circumstances
Receive a copy of your data in a portable format
Withdraw consent at any time, where we are processing based on consent
Complain to the Information Commissioner's Office (UK) at ico.org.uk or to the Data Protection Commission (Ireland) at dataprotection.ie

To exercise any of these rights, email hello@bloqq.co. We aim to respond within one month.

Cookies

See our Cookie Policy for full detail on the cookies and analytics we use.

Changes to this policy

We may update this policy from time to time. Material changes will be flagged on this page and, where appropriate, communicated directly. The "Last updated" date at the top reflects the latest version.

Contact

For any privacy questions, including data access requests, email hello@bloqq.co.