Legal
Privacy Policy
This policy explains how Design My Website (“BedBook”, “we”, “us”), based in Ireland, handles personal data. It applies to visitors to bedbook.ie, accommodation providers who use BedBook, and guests who book through a BedBook-powered site. Contact us at hello@bedbook.ie.
For guest booking data, the accommodation provider is the data controller and BedBook acts as their processor. For our own website, accounts and marketing, BedBook is the controller.
1. What we collect
- Website visitors: basic technical data needed to serve and secure the site (such as IP address and request logs), and only essential cookies unless you agree to more.
- Enquiries & sign-ups: the details you submit — your name, email, phone, and information about your property.
- Owner accounts: your name, email, a securely hashed password, your property and business details, and subscription status.
- Guest bookings (handled for the property): guest name, email, phone, stay dates, number of guests, booking reference and any notes. Card payments are processed by Stripe — we do not store full card numbers.
2. How we use it and our legal bases
- To provide the booking service and your account, and to take and confirm bookings — performance of a contract.
- To send transactional emails (booking confirmations, enquiry confirmations, account and pre-arrival messages) — contract and legitimate interests.
- To provide support, keep the service secure, prevent abuse and meet legal obligations — legitimate interests and legal obligation.
- For any optional marketing or analytics — consent, which you can withdraw at any time.
3. Who we share it with
We do not sell personal data. We share it only with service providers who help us run BedBook, under contract and only as needed:
- Stripe — secure payment processing.
- Brevo — sending transactional email.
- Cloudflare — website hosting and security.
- Our server hosting (EU-based) — running the BedBook application and database.
We may also disclose data where required by law.
4. How long we keep it
Guest personal data is automatically anonymised after a retention period set by the property, keeping only the non-identifying record needed for its accounts. Account and business data is kept while your subscription is active and for a reasonable period afterwards to meet legal and accounting requirements. Enquiry data is kept while we follow it up and for a reasonable period afterwards.
5. Your rights
Under the GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, contact hello@bedbook.ie. If a booking is involved, you may also need to contact the property as controller. You have the right to complain to the Data Protection Commission (dataprotection.ie).
6. International transfers
Our providers may process data outside the EEA (for example Stripe). Where they do, they rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, access controls and a hardened, EU-based server. No system is perfectly secure, but we take protecting your data seriously.
8. Cookies
We use only essential cookies needed to run the site and keep you signed in. If we add analytics or marketing cookies, we will ask for your consent first and you can decline.
9. Changes and contact
We may update this policy from time to time; the “last updated” date shows the current version. Questions or requests: hello@bedbook.ie ·066 717 4067. See also our Terms & Conditions.