Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies when you visit Prague & Beyond, create or use a customer account, register as a business or tourism partner, submit or manage a listing, make or manage a booking, contact support, use platform features, or otherwise interact with our services.

Prague & Beyond operates as a tourism marketplace connecting travellers with businesses and service providers. Depending on the transaction, a provider may separately determine how it processes information needed to deliver its service.

2. Information We Collect

We may collect information that you provide directly, information generated through your use of the platform, and limited technical information necessary to operate and secure the service. This may include:

• Account information such as name, username, email address, telephone number and encrypted account credentials.
• Customer information relating to enquiries, saved listings, bookings, reviews, support requests and account preferences.
• Business and partner information such as business name, contact details, listing information, verification information, application status, commercial plan or commission arrangements and documents submitted for onboarding.
• Booking and transaction information, including the service selected, booking dates, guest numbers, prices, currency, transaction status and payment references.
• Communications sent to us or exchanged through platform support or marketplace features.
• Technical and usage information such as IP address, browser or device information, timestamps, security logs and information about how the platform is accessed.

3. How We Use Personal Information

We use personal information where reasonably necessary to provide, administer, protect and improve Prague & Beyond. This includes creating and authenticating accounts; processing marketplace activity and bookings; connecting customers and providers; reviewing business applications; administering partner plans and commission arrangements; providing dashboards and support; sending service-related communications; preventing fraud or misuse; maintaining records; improving platform functionality; and complying with applicable legal obligations.

Where required by law, marketing communications will be sent only where we have an appropriate basis to do so. You may opt out of marketing communications without preventing essential account, booking, security or transactional messages.

4. Legal Bases for Processing

Where UK or European data-protection law applies, we process personal information on one or more appropriate legal bases. These may include performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the marketplace, and consent where consent is legally required.

The applicable basis depends on the information concerned and the reason it is being processed.

5. When We Share Information

We do not sell personal information. We may share information only where reasonably necessary for the platform or where legally required, including with:

• Tourism businesses, hosts or service providers involved in an enquiry, booking or requested service.
• Payment processors and financial service providers used to process transactions.
• Hosting, infrastructure, communications, analytics, security and other service providers acting on our behalf.
• Professional advisers, regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.
• A successor or relevant party in connection with a genuine corporate restructuring, acquisition or transfer, subject to appropriate safeguards.

Businesses receiving customer information through Prague & Beyond must use it appropriately for the relevant booking, enquiry or service and may have their own privacy obligations.

6. Payments

Where online payment functionality is available, payments may be processed by a specialist third-party payment processor such as Stripe. Prague & Beyond does not need to store full payment-card numbers in order to provide Stripe-hosted checkout functionality. Payment providers may collect and process payment, identity, fraud-prevention and transaction information under their own terms and privacy policies.

Payment functionality may vary depending on the type of customer booking or business partner arrangement available on the platform.

7. AI Assistant & Chat Data

Prague & Beyond may provide an AI-powered travel assistant to help users with travel planning, tourism information and marketplace guidance. When you use the assistant, we may process the messages you submit together with limited technical information needed to operate, secure and improve the feature.

Your messages may be transmitted to a third-party AI service provider for the purpose of generating a response. Do not submit passwords, full payment-card details, identity documents, confidential business information or unnecessary sensitive personal information through the AI assistant.

AI responses are generated automatically and may be incomplete, outdated or inaccurate. They do not confirm live availability, pricing, bookings, payments, cancellation rights or provider commitments. Transaction-specific information should be confirmed through the relevant listing, booking flow, provider or Prague & Beyond support.

8. Cookies and Similar Technologies

Prague & Beyond may use cookies or similar technologies that are necessary for login sessions, security, preferences and core platform functionality. We may also use optional analytics or other non-essential technologies where permitted and, where required, after obtaining consent.

More detailed information about specific cookies and available choices should be provided through our cookie notice or consent controls as these technologies are implemented.

9. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing accounts and bookings, resolving disputes, preventing fraud, maintaining appropriate business and transaction records, and meeting legal, tax, accounting or regulatory requirements.

Business verification documents: Documents submitted by businesses or providers for identity, eligibility or business verification are retained only for as long as reasonably necessary to complete and maintain verification, protect marketplace trust and security, prevent or investigate fraud, handle disputes, and meet applicable legal or regulatory obligations. Access to these documents is restricted to authorised personnel. When the documents are no longer required for these purposes, they will be securely deleted or, where appropriate, anonymised.

Retention periods may therefore differ depending on the type of information and the relationship you have with Prague & Beyond. Information that is no longer required will be deleted, anonymised or otherwise handled in accordance with applicable requirements.

10. Information Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, authentication, encrypted connections, password hashing, restricted administrative access and security monitoring.

No online service can guarantee absolute security. Users are responsible for keeping their own login credentials confidential and should contact us promptly if they believe their account has been compromised.

11. Your Privacy Rights

Depending on where you live and which law applies, you may have rights concerning your personal information. These may include the right to request access, correction, deletion, restriction or portability of certain information, to object to certain processing, or to withdraw consent where processing is based on consent.

Some rights are subject to legal conditions and exceptions. We may need to verify your identity before completing a privacy request, and we may retain information where continued retention is legally required or otherwise permitted.

12. International Data Transfers

Some service providers supporting Prague & Beyond may process information in countries other than the country in which you are located. Where applicable data-protection law requires safeguards for an international transfer, we will seek to use an appropriate lawful transfer mechanism or other recognised safeguard.

13. Children's Privacy

Prague & Beyond is not intended for children to independently create business accounts, enter commercial arrangements or provide payment information. Where a travel service involves a child, the relevant booking information should be provided by an adult authorised to make the booking. If we learn that personal information has been collected from a child in circumstances where it should not have been, we will take appropriate steps to address it.

14. Changes to This Policy

We may update this Privacy Policy as Prague & Beyond develops, when our data practices change, or when legal or regulatory requirements require an update. The current version will be published on this page with its latest revision date. Where a change is material and appropriate, we may provide additional notice through the platform or by another suitable method.

15. Contact and Privacy Requests

For questions about this Privacy Policy, requests concerning your personal information, or privacy-related concerns, contact Prague & Beyond using the details below.