Privacy Policy
Last updated: 10/7/2025
1. Who we are
This Privacy Policy explains how Phantom Properties GmbH (Germany) and Phantom Properties Ltd (England) (together, “Phantom Properties”, “we”, “us”) collect, use, share, and protect your data when you use our websites, apps, and services to browse, list, or book furnished rentals.
2. Personal data we collect
- Account & contact: name, email, phone, password, communication preferences.
- Identity & verification: ID documents, date of birth, proof of stay purpose (work/study), where legally required.
- Booking & payments: stay details, invoices, payouts, payment status, and limited payment metadata (payments are processed by PCI‑compliant providers).
- Usage & device: log data, IP address, browser/OS, cookie identifiers, analytics and crash events.
- Preferences & communications: saved listings, search filters, messages with our team and partners.
3. How we use your data
- Provide and improve the platform, listings, search, booking, and support experiences.
- Process bookings, payments, deposits, refunds, and generate contracts and invoices.
- Verify identity, prevent fraud and abuse, and comply with legal obligations (KYC/AML where applicable).
- Personalize content (e.g., saved searches), run analytics, and measure performance.
- Send important notices (service, security), and—where permitted—marketing communications.
4. Legal bases (EEA/UK)
- Contract: to provide bookings, accounts, payments, and customer support.
- Legitimate interests: to secure our services, prevent fraud, improve features, and communicate essential updates.
- Consent: for non‑essential cookies/analytics and marketing where required—you can withdraw at any time.
- Legal obligation: financial reporting, tax/audit, KYC/AML and requests from authorities where applicable.
5. Sharing your data
We share information with trusted providers who help us run our business—e.g., hosting, analytics, payments, ID verification, and customer support tools. Where you book or list properties, we share relevant details with the counterparties (e.g., landlord or guest) to fulfil the booking. All vendors are bound by agreements and process data only on our instructions.
6. International transfers
Data may be processed outside your country. Where data moves from the EEA/UK to third countries, we rely on approved safeguards (e.g., adequacy decisions or Standard Contractual Clauses) and implement additional protections as needed.
7. Retention
We keep data for as long as necessary for the purposes in this policy—typically for the life of your account and to comply with legal/accounting obligations. When no longer needed, data is securely deleted or anonymized.
8. Your rights
Subject to local law (including GDPR/UK GDPR), you may have rights to access, correct, delete, restrict or object to processing, and data portability. You can also withdraw consent and lodge a complaint with your data protection authority. We will respond to verified requests within required timelines.
9. Cookies
We use cookies and similar technologies for core functionality, analytics, and personalization. For details and controls, see our Cookie Policy.
10. Security
We implement technical and organizational measures to protect personal data, including encryption in transit, access controls, and vendor diligence. No method is 100% secure; we continually improve our safeguards.
11. Children’s privacy
Our services are not directed to children under 16. If we learn we have collected such data, we will delete it promptly.
12. Changes to this policy
We may update this policy from time to time. Significant changes will be posted here with a revised "Last updated" date.
13. Contact
For privacy queries: Phantom Properties GmbH, Berlin, Germany and Phantom Properties Ltd, London, England. Email: privacy@phantomproperties.co