Data processing agreement (launch draft)
Guest Desk is a trading name of 15 New Street trading Ltd. Registered in England & Wales, company no. 16973194. Registered office: Tudor House, 16 Cathedral Road, Cardiff, Wales, CF11 9LJ.
Launch draft. This document is awaiting solicitor approval and may change before it takes effect.
Roles
You are the controller of guest personal data and Guest Desk acts as processor, processing it only on your documented instructions, which are the settings, answers and rules you give us in the portal.
What we process
Guest messages, booking references and guest names that arrive through your connected channels or that your team or ours records, in order to answer guests and escalate to you.
Automated processing
Routine replies are generated by AI from your approved answers. The AI does not make booking, financial or safety approvals. Those go to you.
Security
Credentials you provide for connections are stored encrypted and are never shown again. Access is limited to your account and authorised operations staff. We never ask for your platform passwords.
Conversation transcripts
You confirm you are entitled to share guest conversations for processing on your instructions. Raw uploaded transcripts are scheduled for deletion 30 days after processing. Approved knowledge and operational records are retained as described in the privacy notice.
Sub-processors
Replit (hosting, database and storage), OpenAI (AI answers), Clerk (sign-in), Stripe (billing), Resend (email delivery), any email provider you forward mail through, and the PMS provider you connect. We will update this list when it changes.
Acceptance
You accept this agreement when creating your business profile during onboarding.
Contact
Contact hello@guestdesk.co.uk.