Last updated: 20 April 2026
Privacy Policy
wayfind Ltd ("we", "us") is the data controller for personal data processed through wayfind. This policy explains what we collect, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. What we collect
- Account data: name, email, password hash, profile details (city, languages, bio, avatar).
- Identity verification (Hosts): government ID and selfie processed by our KYC provider; we store only verification status and a reference, not the document itself.
- Payment data: handled by Stripe; we receive only transaction metadata, never full card numbers.
- Conversation content: messages between Customers and Hosts, retained for safety and dispute resolution.
- Technical data: IP address, device, browser, cookies and similar identifiers.
2. Why we use it (lawful bases)
- Contract: to provide the Service, process payments, and pay Hosts.
- Legal obligation: tax records, KYC/AML, responding to lawful requests.
- Legitimate interests: safety, fraud prevention, product improvement, service emails.
- Consent: marketing emails and non-essential cookies (you can withdraw at any time).
3. Sharing
We share data with: Stripe (payments and payouts), our KYC provider (identity verification), our cloud hosting and email providers (acting as processors), and law enforcement where legally required. We do not sell personal data.
4. International transfers
Some processors are based outside the UK. Where that happens we rely on UK-approved Standard Contractual Clauses or adequacy decisions.
5. Retention
Account and conversation data are retained while your account is active and for up to 6 years afterwards to meet UK tax and limitation-period requirements. KYC records are retained for 5 years after the Host relationship ends, as required by the Money Laundering Regulations.
6. Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. Contact privacy@wayfind.app. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
7. Cookies
We use strictly necessary cookies for sign-in and security. Analytics and marketing cookies are set only with your consent via the cookie banner.
8. Children
The Service is not directed to anyone under 18 and we do not knowingly collect data from children.
9. Changes & contact
We will notify you of material changes by email or in-app. Contact: wayfind Ltd · privacy@wayfind.app.
Starting draft. Have your DPO or a UK data-protection solicitor review before launch.