Privacy Policy
Who is responsible for your data
Kbnbs Ltd is the data controller for personal data processed on kbnbs.com. For anything in this policy, or to exercise any of your rights, email hello@kbnbs.com.
What we collect from guests
When you create a guest account we collect your email address, used for sign-in codes and service messages. As you use the site we record the stays you save as favourites and the host contact details you reveal, so your account page can show them back to you and so our rate limits work. If you tick the marketing box we record that choice and the date you made it. We do not ask guests for identity documents, payment details or phone numbers.
What we collect from hosts
Hosts give us their name, phone number and email as contact details for their listing, the property information and photographs that make up the advertisement, and the exact address and location of the property. The exact address and precise location are stored separately with restricted access: the public site shows only an approximate area (the shown point is deliberately offset by a few hundred metres) until a signed-in guest reveals the contact details. Subscription billing is handled by Stripe, which processes your card; we store only a reference to your Stripe customer record and your subscription status, never card numbers.
Enquiries between guests and hosts
When a guest reveals a host’s contact details we log which guest revealed which listing and when. This log powers the guest’s own history page, our anti-scraping rate limits, and the host’s anonymous statistics (hosts see how many reveals their listing received, never who made them). Conversations then happen off-platform by phone, WhatsApp, SMS or email, and we have no access to them.
Analytics
We use PostHog, hosted in the EU, to understand how the site is used, and only if you accept analytics cookies. Analytics events are not linked to your name or email, and we do not use advertising trackers or sell data to anyone. Listing view counts shown to hosts are simple counters and contain nothing about who viewed.
Emails
Service emails (sign-in codes, welcome, enquiry receipts, listing and billing updates for hosts) are sent through Resend on our own domain and are part of running the service. Marketing email is separate, strictly opt-in, and every marketing message includes a one-click unsubscribe. Your marketing preference can also be changed any time from your account page.
Legal bases
We rely on performance of a contract for account, listing and billing data; on your consent for marketing email and analytics cookies; and on our legitimate interests in keeping the platform secure for reveal logs, rate limiting and moderation records. Where we rely on legitimate interests we have balanced them against your rights.
Where your data lives and who processes it
Our database and files are hosted with Supabase in the European Union (London region). Our processors are Supabase (database, authentication and photo storage), Vercel (website hosting), Stripe (host subscription payments), Resend (email delivery) and PostHog EU (consented analytics). Each processes data only on our instructions. If you use Kbnbs from Israel or the United States, your data is transferred to and stored in the EU/UK under appropriate safeguards.
Retention
Account data is kept while your account exists. Contact-reveal logs are retained for up to 24 months and then anonymised. Moderation and audit records for listings are kept while the listing exists. When you delete your guest account from the account page, your profile, favourites and reveal history are removed immediately; hosts can request account deletion by email once their subscription has ended.
Your rights
You have the right to access, correct, export and delete your personal data, to object to or restrict processing, and to withdraw any consent at any time. Guests can self-serve most of this from the account page, including a full delete. For anything else, email hello@kbnbs.com and we will respond within one month. You can complain to the Information Commissioner’s Office at ico.org.uk, but we would appreciate the chance to resolve any concern first.