Skip to content
Guestalizer
See how Guestalizer looks before you create an account

A preview filled with sample data. No account and no card needed.

Legal

Data processing terms

How Global Tech Develop processes guest data on behalf of hosts (UK GDPR Article 28).

Last updated: 8 October 2026

Who does what

These terms form part of the Guestalizer terms between Global Tech Develop ("GTD", the processor) and each host business ("you", the controller). They apply to personal data about your guests and your team that GTD processes to provide Guestalizer, as required by Article 28 of the UK GDPR.

What is processed

  • Purpose: checking guests before arrival, holding deposits, signing agreements, messaging guests and keeping your guest records, as you set up in Guestalizer.
  • People: your guests and your team members.
  • Data: contact details, ID document images or check results, card brand and last four digits, signatures and signed agreements, messages, booking details and, if you keep it, the UK guest register.
  • Duration: while your account is open, plus the deletion periods in our privacy policy.

GTD’s commitments

  • Process the data only on your documented instructions, which are your settings and use of Guestalizer, unless the law requires otherwise (and tell you if so).
  • Make sure everyone who can access the data is bound by confidentiality.
  • Keep appropriate security measures: encryption in transit and at rest, private storage for ID images, access controls, logging, nightly backups and regular security reviews.
  • Use only the sub processors listed in our privacy policy, each under written terms that protect the data as well as these do, and tell you before adding or replacing one so you can object.
  • Help you answer guests who use their data protection rights, and with security, breach notifications and data protection impact assessments.
  • Tell you without undue delay, and within 48 hours, after becoming aware of a personal data breach affecting your data.
  • At the end of the service, delete your data (or return it first if you ask), apart from what the law requires us to keep.
  • Give you the information you reasonably need to show these terms are met, and allow audits on reasonable notice, normally by answering a written questionnaire.

International transfers

Guestalizer is hosted in London. Any transfer outside the UK by a sub processor is protected by UK adequacy regulations or the UK International Data Transfer Addendum.

Contact

Data protection questions: support@guestalizer.io.