DirectBook — Privacy Policy
Last updated: 15 June 2026
1. Who we are
DirectBook (directbook.al) operates a direct-booking software platform for accommodation providers. For the personal data we process to run the platform and our relationship with Hosts, DirectBook is the data controller. For personal data a Host collects from their own guests through their booking page, the Host is the controller and DirectBook acts as a processor on the Host's behalf.
2. Data we collect
- Account data: name, email, hashed password, business/tenant name, locale, last login.
- Booking data (on behalf of Hosts): guest name, email, phone, country, stay dates, party size and booking notes.
- Payment metadata: gateway, status, amount and references. Card details are handled by the payment gateways and are never stored by DirectBook.
- Technical data: IP address, request logs and rate-limit records used for security.
- Communications: notification logs (email / Telegram / WhatsApp delivery status).
3. How we use data
To provide and operate the service; to process subscriptions and bookings; to send transactional notifications and reminders; to prevent fraud and abuse; to provide support; and to meet legal obligations. Our legal bases include performance of a contract, our legitimate interests in operating and securing the service, and compliance with law.
4. Sharing
We share data only with the processors needed to run the service — for example payment gateways (Stripe, PayPal, PokPay), email and messaging providers, and hosting and backup providers — and with authorities where legally required. We do not sell personal data.
5. International transfers
Some processors may operate outside your country. Where they do, we rely on appropriate safeguards such as standard contractual clauses.
6. Retention
We keep account and booking data for as long as needed to provide the service and to meet legal and accounting obligations, after which it is deleted or anonymised. Backups are kept on a rolling schedule and then overwritten.
7. Your rights
Subject to applicable law (including the GDPR) you may request access to, correction, export or deletion of your personal data, and object to or restrict certain processing. Guests can also submit data requests through the booking site's privacy tools. To exercise your rights, contact hello@directbook.al. You may also complain to your local data-protection authority.
8. Security
We protect data with encryption of sensitive credentials, hashed passwords, access controls, rate limiting and regular backups. No system is perfectly secure, but we work to protect your information.
9. Cookies
We use only essential cookies needed for login sessions, security (CSRF) and language preference. We do not use third-party advertising cookies.
10. Changes
We may update this policy and will post the new version here with a revised date.
11. Contact
Privacy questions or requests: hello@directbook.al