HomeGDPR and Data Rights

GDPR and Data Rights

Last updated: March 25, 2026

The General Data Protection Regulation (GDPR) governs how personal data is collected, used, and processed across the EU — and BookNow24/7 extends the same protections to everyone, everywhere. This page explains your rights and how to exercise them.

Your rights at a glance

  • Access & correct your data anytime.
  • Delete or export what we hold about you.
  • Object or restrict how we process it.
  • Withdraw consent without giving a reason.
  • Response time — full reply within 30 days.
  • Escalate to your national data authority if unsatisfied.

Part 1

Your Rights Under GDPR

Access

Art. 15

Get a copy of the personal data we hold about you, plus how it's used.

Rectification

Art. 16

Correct any inaccurate or incomplete personal data.

Erasure

Art. 17

Ask us to delete your data, subject to legal retention duties.

Restrict processing

Art. 18

Ask us to pause processing while a dispute is resolved.

Portability

Art. 20

Receive your data in a structured, machine-readable format.

Object

Art. 21

Object to processing based on legitimate interests or marketing.

Withdraw consent

—

Withdraw consent at any time, without affecting past processing.

Part 2

How We Process Your Data

Legal bases for processing

  • Contract performance — fulfilling bookings, payments, and host–guest communication.
  • Legal obligation — tax, financial reporting, and anti-money-laundering rules.
  • Legitimate interests — fraud prevention, security, and Platform improvement.
  • Consent — marketing, non-essential cookies, and certain data sharing.

Part 3

Exercise Your Rights

Use the form below to submit a request. We'll acknowledge it within 72 hours and provide a full response within 30 days (up to 3 months for complex cases, with notice within 30 days).

Submit a Data Rights Request

Part 4

Contact & Escalation

Data Controller — BookNow24/7

Complaint rights

Not satisfied with our response, or believe your data is being processed unlawfully? You can lodge a complaint with your national data protection authority — the Information Commissioner's Office (ICO) in the UK, or the supervisory authority in your EU Member State of habitual residence.