Bedsconnect Ltd (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal data of our B2B partners, including travel agencies, wholesalers, and tour operators. This policy explains how we collect, use, disclose, and safeguard your data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
01Data Controller
Bedsconnect Ltd is the data controller responsible for your personal data.
Contact: privacy@bedsconnect.com
02What Personal Data We Collect
We may collect and process the following categories of data:
- Identification & Contact Details: Company name, business registration, contact names, emails, phone numbers
- Account Information: User credentials, login activity
- Transactional Data: Booking history, payments, invoicing
- Technical Data: IP address, browser type, device identifiers, website interactions (via cookies)
03Legal Basis for Processing
We process your data on the following lawful bases under Article 6 of the GDPR:
- Contractual necessity – to provide access to our platform and process bookings
- Legal obligation – to comply with applicable tax and financial regulations
- Legitimate interest – to improve services, prevent fraud, and manage relationships
- Consent – for optional communications and marketing (can be withdrawn at any time)
04How We Use Your Data
- To create and manage B2B accounts
- To process hotel bookings, modifications, and cancellations
- To issue invoices and manage payments
- To provide customer support
- To send operational updates, newsletters (if opted-in), or system alerts
- To comply with legal and regulatory requirements
05Data Retention
We retain your data:
- As long as you maintain an active business relationship with Bedsconnect
- For a period required by legal and tax obligations (usually 5–10 years)
- You may request deletion of your data where legally permissible
07Your Rights (as a Data Subject)
Under GDPR, you have the right to:
- Access – Request a copy of your data
- Rectification – Request correction of inaccurate or incomplete data
- Erasure – Request deletion (when applicable)
- Restriction – Ask us to limit processing
- Data Portability – Receive data in a portable format
- Object – Object to processing based on legitimate interest or marketing
To exercise these rights, email: privacy@bedsconnect.com
08Data Security
We apply technical and organizational measures such as:
- HTTPS encryption
- Role-based access control
- Secure backups and firewalls
- Staff training in data protection
09International Transfers
If data is transferred outside the EU, it will be protected by appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Transfers to countries deemed adequate by the European Commission
11Complaints
You have the right to lodge a complaint with your national data protection authority if you believe your rights have been violated.
12Updates
We may update this Privacy Policy from time to time. The latest version will always be available on our website.