Privacy Policy

The host, property manager, hotel, or other accommodation provider using MrGG generally determines why and how reservation, guest, and stay-related personal information is processed. In those circumstances, the accommodation provider acts as the data controller, business, or equivalent responsible party under applicable data protection laws.

MrGG generally acts as a data processor or service provider and processes personal information on behalf of the accommodation provider and in accordance with its instructions.

MrGG may act as an independent controller where it determines the purposes and means of processing, including for platform security, fraud prevention, service administration, legal compliance applicable directly to MrGG, and the establishment, exercise, or defence of legal claims.

Accommodation providers may request a Data Processing Agreement by contacting hello@mrgg.io.

Depending on the services selected by the accommodation provider and the requirements applicable to a reservation, we may process:

• Full name
• Date and place of birth
• Nationality
• Country of residence
• Home address
• Email address
• Phone number
• Reservation and accommodation details
• Arrival and departure information
• Guest check-in information
• Passport, national identity card, or other identification details
• Copies or images of identity documents, where required or enabled
• Identity-verification information, including selfie images where this feature is enabled
• Electronic signatures
• Rental agreements and guest declarations
• Payment, deposit, and purchased-service information
• Communications sent through the platform
• Device and browser information
• IP address
• Approximate location derived from technical information
• Security, access, and activity logs
• Preferences and information voluntarily provided by the guest

The exact information collected may vary depending on the accommodation provider, the location of the property, the services enabled, and applicable legal requirements.

MrGG does not store full payment-card details. Payments are processed by approved third-party payment providers.

We may process personal information to:

• Provide, operate, and maintain the Service
• Facilitate reservations and guest check-in workflows
• Verify guest identity where required or enabled
• Prepare and process rental agreements, registration forms, declarations, and electronic signatures
• Help accommodation providers comply with applicable guest-registration and reporting requirements
• Process payments, deposits, waivers, insurance products, and additional services through approved providers
• Deliver arrival information, access instructions, guest guides, and stay-related communications
• Enable communications between guests and accommodation providers
• Provide customer and technical support
• Protect accounts, reservations, properties, guests, and the platform
• Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity
• Troubleshoot errors and improve the reliability and quality of the Service
• Comply with legal obligations and lawful requests
• Establish, exercise, or defend legal claims
• Perform analytics where permitted by applicable law
• Retain guest information for future reservations where the guest has expressly chosen this option

MrGG does not use identity documents or check-in information for unrelated advertising purposes.

Depending on the context and applicable data protection laws, personal information may be processed on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to provide the Service, facilitate a reservation, complete an online check-in, deliver stay-related communications, or provide requested features.
• Legal obligation: where the accommodation provider or MrGG is required to collect, retain, verify, or disclose information under applicable laws and regulations, including local guest-registration, immigration, tourism, taxation, public-safety, and accommodation-reporting requirements.
• Legitimate interests: where processing is necessary for platform security, fraud prevention, service administration, troubleshooting, protection of access credentials, improvement of the Service, or the establishment, exercise, or defence of legal claims, provided that those interests are not overridden by the individual’s rights and freedoms.
• Consent: where consent is required, including for certain optional communications, analytics technologies, identity-verification features, or retention of information for future reservations. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
• Protection of vital interests or other lawful grounds: where processing is necessary to protect an individual’s vital interests or is otherwise permitted under applicable law.

The information required for guest registration and the applicable retention period may vary depending on the location of the accommodation and the legal obligations applicable to the host or property manager.

Where MrGG processes personal information solely on behalf of an accommodation provider, the accommodation provider is responsible for determining the appropriate legal basis.

We may share personal information with:

• The relevant host, property manager, hotel, or accommodation provider
• Authorised employees, contractors, and representatives of the accommodation provider
• Approved infrastructure, hosting, communications, support, and technology providers
• Payment processors and financial-service providers
• Identity-verification providers where this feature is enabled
• Electronic-signature and document-processing providers
• Insurance, damage-waiver, deposit, and additional-service providers where relevant
• Property-management systems and other services integrated with MrGG
• Government bodies, regulators, law-enforcement authorities, or other competent authorities where disclosure is legally required
• Professional advisers, including lawyers, auditors, insurers, and accountants
• Successor entities in connection with a merger, acquisition, reorganisation, financing, or sale of all or part of our business

Service providers may process personal information only for the purposes for which it is provided and subject to appropriate contractual and security obligations.

We do not sell personal information for money.

MrGG and its service providers may process personal information in countries other than the country in which the guest or accommodation provider is located.

Where applicable law requires additional safeguards for international transfers, we rely on lawful transfer mechanisms such as:

• Adequacy decisions
• Standard Contractual Clauses
• The UK International Data Transfer Agreement or UK Addendum
• Contractual, organisational, and technical safeguards
• Other legally recognised transfer mechanisms

Further information about applicable transfer safeguards may be requested by contacting hello@mrgg.io.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The accommodation provider’s settings and instructions
• The type of personal information
• The location of the accommodation
• Applicable legal and regulatory requirements
• Contractual and operational needs
• Security and fraud-prevention requirements
• The need to establish, exercise, or defend legal claims

Identity documents and other sensitive check-in information may be deleted after a limited retention period selected by the accommodation provider or required by applicable law.

Some reservation records may be retained in a restricted or read-only form where necessary to maintain an operational history, resolve disputes, support the accommodation provider, or comply with legal obligations.

Where a guest has expressly chosen to retain information for future reservations, MrGG may retain selected guest-profile information beyond the standard reservation-retention period. Where this processing is based on consent, the guest may withdraw that consent at any time by contacting hello@mrgg.io.

Withdrawal of consent does not require deletion of information that must continue to be retained under another lawful basis, including a legal obligation or the establishment, exercise, or defence of legal claims.

Depending on the individual’s location and applicable data protection laws, rights may include:

• Access to personal information
• Correction of inaccurate or incomplete information
• Deletion of personal information
• Restriction of processing
• Objection to certain processing
• Data portability
• Withdrawal of consent
• Information about how personal information is processed
• The right not to be subject to certain solely automated decisions
• The right to lodge a complaint with a competent data protection authority

These rights are not absolute and may be subject to legal limitations or exceptions.

Where the accommodation provider is the controller or responsible party, requests may be redirected to that accommodation provider. MrGG will assist the accommodation provider with responding to requests where required by applicable law and the applicable service agreement.

To submit a privacy request, contact hello@mrgg.io. We may need to verify the requester’s identity before completing the request.

We use reasonable technical and organisational measures designed to protect personal information, including, where appropriate:

• Encryption in transit and at rest
• Access controls and authentication measures
• Activity logging and security monitoring
• Data minimisation and retention controls
• Vendor assessment and contractual safeguards
• Incident-detection and response procedures
• Measures designed to protect reservation links and property-access information

No electronic system, transmission method, or storage technology can guarantee absolute security. Guests and accommodation providers should protect reservation links, login credentials, door codes, and other access information from unauthorised use.

MrGG is not directed to children as a general consumer service.

Personal information relating to children or minors may nevertheless be processed where they are included in an accommodation reservation and where the accommodation provider is required or permitted to collect that information for guest registration, safety, contractual, or legal purposes.

In such cases, the accommodation provider is responsible for determining the appropriate lawful basis and for obtaining consent from a parent or legal guardian where required by applicable law.

MrGG does not knowingly use children’s identity or reservation information for advertising purposes.

We may update this Privacy Policy from time to time to reflect changes to the Service, our processing activities, legal requirements, or security practices.

The updated version will be published on this page with a revised “Last updated” date.

Where required by applicable law, we will provide additional notice or request renewed consent before a material change takes effect.

For questions, privacy requests, or concerns about this Privacy Policy, contact:

Hostify.com Inc. / MrGG
Email: hello@mrgg.io

Where the question concerns information collected for a specific reservation or stay, guests may also contact the relevant host, property manager, hotel, or accommodation provider.