Privacy Policy

Last updated: March 2025

This Privacy Policy explains how Datrics Ltd ("we", "us", or "our") collects, uses, and protects your personal data when you use TT Rooms, our accommodation marketplace for the Isle of Man TT race period. Datrics Ltd is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Datrics Ltd is a company registered in England and Wales. TT Rooms is operated by Datrics Ltd as a platform connecting property hosts with visiting motorsport fans for the Isle of Man TT race period.

2. Data We Collect

We collect and process the following categories of personal data:

Account Information

When you register for an account, we collect your name, email address, and any profile information you choose to provide (such as a profile photo and biography).

Property Listings

If you list a property, we collect details about your property including its address, description, photos, pricing, and availability. This information is published publicly on the platform.

Booking Requests and Messages

We store booking requests you submit or receive, and messages exchanged between hosts and guests through our platform messaging system.

Payment Information

If you pay a listing fee or listing boost as a host, payment is processed by Stripe. We do not store full card details. We retain transaction records (amount, date, reference) for accounting purposes.

Usage Analytics

We collect anonymised data about how you use the platform, including pages visited, search queries, and general device and browser information. This helps us improve the service.

Technical Data

We automatically collect IP addresses, browser type, operating system, and referring URLs when you access the platform.

3. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Enable you to list properties, submit and manage booking requests
• Facilitate communication between hosts and guests
• Process listing fee payments via Stripe
• Send transactional emails (booking notifications, account updates)
• Improve and develop the platform through usage analytics
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the service you have signed up for (account management, listing, messaging, booking requests).
• Legitimate interests: Analytics to improve the platform, fraud prevention, and platform security.
• Legal obligation: Retaining financial records for accounting and tax compliance.
• Consent: Marketing communications, where applicable (you can withdraw consent at any time).

5. Sharing Your Data

We do not sell or share your personal data with third parties without your consent, except in the following limited circumstances:

• Service providers: We share data with trusted providers who help us operate the platform — including Supabase (database and authentication), Vercel (hosting), Stripe (payment processing), and Resend (email delivery). These providers are contractually bound to process your data only on our instructions.
• Platform participants: When you make or accept a booking request, limited profile information (name, profile photo) is shared with the other party to facilitate the arrangement.
• Legal requirements: We may disclose data if required to do so by law, court order, or to protect our legal rights.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (typically up to 7 years for financial records).

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to correction: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restrict processing: You can ask us to pause processing of your data in certain circumstances.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

8. Cookies

TT Rooms uses cookies and similar technologies to operate the platform and understand usage patterns.

Essential Cookies

These are required for the platform to function. They include authentication session cookies that keep you logged in. These cannot be disabled.

Analytics Cookies

We use anonymised analytics to understand how visitors use the platform. No personally identifiable data is collected for analytics purposes.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using core platform features.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our platform uses industry-standard encryption (HTTPS/TLS) for all data in transit. Access to personal data is restricted to authorised personnel only.

10. International Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements (such as adequacy decisions or Standard Contractual Clauses).

11. Children

TT Rooms is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. The "last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us

For any privacy-related questions, requests, or concerns, please contact: