Legal
Privacy Policy
Last updated:
At LodgeStatus, we are committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, share, and protect your data when you use our platform.
1. Information We Collect
We collect information you provide directly to us, such as your name, email address, phone number, password credentials, hotel or business details, property location, staff roles, booking information, guest details, room and folio data, uploaded images or documents, support requests, and subscription or invoice information. You may also provide optional profile details such as date of birth, gender, address, identification details, timezone, and approximate coordinates. We collect usage and technical data automatically, including IP address, browser or device type, operating system, log events, session data, cookies, and similar identifiers.
2. Hotel and Guest Data
LodgeStatus is a hotel operations platform. A hotel, business, or other organisation using the Service decides what guest, customer, employee, booking, payment, messaging, and media data it enters. For that data, the organisation is generally the data controller and LodgeStatus acts as its service provider or processor, processing the data only to provide the Service, follow the organisation's instructions, maintain security, and meet legal obligations. Questions about a hotel's use of your data should first be directed to that hotel.
3. How We Use Your Information
We use information to create and secure accounts; operate hotel management, booking, point-of-sale, housekeeping, room-service, Smart TV, inbox, reporting, and notification features; process subscriptions and payments; send transactional email, SMS, WhatsApp, and push notifications; provide support; prevent fraud and abuse; troubleshoot and improve the Service; comply with law; and send optional marketing communications, which you can opt out of. We do not sell personal data or share it with third parties for their own advertising.
4. Device, Push Notification, and Smart TV Data
If you enable notifications, we receive and store a Firebase Cloud Messaging token associated with your account or device so we can deliver alerts. A Smart TV may send a device identifier such as a MAC address, application or device key, IP address, platform, model, and app version. Pairing codes are short-lived. After pairing, the TV uses a protected device credential to receive hotel messages and room-service or operational updates. You can revoke a TV or disable notifications from the relevant account or device settings.
5. Payments
Payments are processed through the payment gateway selected for the transaction, which may include Paystack, Stripe, PayPal, Flutterwave, Monnify, Nomba, OPay, Bachs, or another enabled provider. We receive transaction status, references, amounts, currency, and limited billing information. We do not intentionally store full payment-card numbers or card security codes on our servers. The selected provider's privacy policy also applies to information submitted directly to it.
6. How We Share Information
We share information only as needed to provide the Service or meet legal obligations. This may include cloud hosting and storage providers; email, SMS, WhatsApp, and push-notification providers; payment processors; channel managers and booking integrations that a hotel enables; customer-support and messaging tools; analytics, error-monitoring, and security providers; and professional advisers or authorities where legally required. We require service providers to protect information and use it for authorised purposes. A hotel may also share information with its staff, guests, vendors, or connected channels according to its own settings and instructions.
7. Data Retention
We retain account information and hotel data while an account or subscription is active and for as long as reasonably needed to provide the Service, complete backups, meet legal or accounting obligations, resolve disputes, prevent fraud, and protect the platform. Hotels control retention of most guest and operational records through their account. Backups and provider systems may retain encrypted copies for a limited period before automatic deletion. You may request deletion of eligible personal data at any time.
8. Security
We use administrative, technical, and organisational safeguards intended to protect personal information. Access to production systems is restricted to authorised personnel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Cookies, Storage, and Analytics
We use essential cookies, session storage, and local storage to keep you signed in, remember preferences, protect forms, complete onboarding, and provide requested features. Our website may use privacy-respecting analytics, campaign measurement, embedded content, and error monitoring. Third-party content can set its own cookies or collect technical information under its own policy. You can control cookies through your browser; disabling essential storage may affect sign-in and other features.
10. Third-Party Services and International Transfers
Our platform integrates with third-party services such as payment processors, Firebase, cloud storage, analytics and error-monitoring services, email and messaging providers, WhatsApp, channel managers, and support tools. These providers may process information in countries other than where you live. Where applicable law requires safeguards for an international transfer, we use appropriate contractual, organisational, or technical safeguards. Review the relevant provider's privacy policy for its independent processing.
11. International Use
LodgeStatus may process information in countries other than the country where you live. Where applicable law requires safeguards for an international transfer, we take steps appropriate to that requirement.
12. Your Rights and Data Protection Requests
Depending on your jurisdiction, you may have rights to access, correct, update, export, object to certain processing, restrict processing, withdraw consent, or request deletion of your personal information. Contact info@lodgestatus.com and include the account email, hotel or business name, and the request. We may verify your identity and, where a hotel controls the data, direct the request to that organisation. Our deletion process is described at /legal/data-deletion.
13. Children
The Service is intended for businesses and adults acting for themselves or an organisation. It is not directed to children. We do not knowingly collect children's personal information for independent use of the Service. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and, where the changes are significant, by email. Your continued use of LodgeStatus after the changes take effect constitutes your acceptance of the revised policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at info@lodgestatus.com.