# Privacy Policy

**Last updated:** 18 September 2026

This Privacy Policy explains how **Go Host Ltd** (company number **16446520**), whose registered office is at **38 Carleton Street, Morecambe, LA4 4NY** (“Go Host”, “we”, “us”, or “our”), processes personal data when you use **BayMove** (baymove.co.uk), our UK property advertising service for the Morecambe Bay area.

We aim to meet UK GDPR and Data Protection Act 2018 expectations for a clear privacy notice, including identity of the controller, purposes, lawful bases, retention, rights, and how to complain to the Information Commissioner’s Office (ICO).

## 1. Who we are (controller)

**Data controller:** Go Host Ltd  
**Registered office:** 38 Carleton Street, Morecambe, LA4 4NY  
**Company number:** 16446520  
**Product:** BayMove (baymove.co.uk)

**Data Protection Officer:** Mike Brown  
**Email:** [dpo@2880.co.uk](mailto:dpo@2880.co.uk)

## 2. Personal data we collect

Depending on how you use BayMove, we may process:

- **Account and identity data** — name, email address, password (stored hashed), phone number where provided, and profile details;
- **Team and organisation data** — agency or team name, role within a team, and related business contact details;
- **Listing data** — property addresses, particulars, photos, descriptions, and contact preferences associated with listings you create (note: much of this is published when a listing goes live);
- **Enquiry and communication data** — messages sent via enquiry forms, emails, and support correspondence;
- **Billing and subscription data** — plan selection, billing history, and payment-related identifiers processed via Stripe (we do not store full card numbers);
- **Technical and usage data** — IP address, browser type, device information, pages viewed, approximate location derived from IP, and diagnostic logs;
- **Cookie and analytics data** — see the cookies section below;
- **Marketing preferences** — where you have opted in or where soft opt-in rules apply under PECR.

We do not intentionally collect special category data. Please do not include sensitive personal information in listing descriptions or enquiries unless it is necessary and lawful.

## 3. How we collect data

We collect data directly from you (registration, listings, enquiries, billing), automatically from your device (logs, cookies where used), and from service providers that help us operate BayMove (for example address lookup, maps, email, and payment processing). Where listings include publicly available property attributes enriched from third-party data sources, we process that information as needed to help you prepare and display a listing.

## 4. Purposes and lawful bases

| Purpose | Examples | Lawful basis (UK GDPR) |
| --- | --- | --- |
| Provide the service | Account creation, teams, listing tools, search, enquiries | Contract (Art. 6(1)(b)); legitimate interests for site security and improvement (Art. 6(1)(f)) |
| Billing and subscriptions | Cashier/Stripe subscriptions for teams | Contract; legal obligation for tax/accounting records |
| Publish listings | Display live listings and contact routes | Contract; legitimate interests of listers and seekers |
| Communications | Service emails, password resets, billing notices | Contract; legitimate interests |
| Marketing (where applicable) | Product updates you opt into | Consent, or soft opt-in where PECR allows |
| Security and abuse prevention | Fraud checks, rate limiting, logs | Legitimate interests; legal obligation where applicable |
| Legal compliance | Responding to lawful requests, defending claims | Legal obligation; legitimate interests |

Where we rely on legitimate interests, we balance those interests against your rights and expectations.

## 5. Property listings and public information

If you create a listing, content you choose to publish (such as address details, price, photos, and description) will be visible to visitors of BayMove. **You remain responsible for that content** (see our Terms of Service). Do not publish personal data about third parties without a lawful basis.

## 6. Sharing your data

We may share personal data with:

- **Service providers** acting as processors (hosting, email, analytics if enabled, error monitoring, address/property data providers, and Stripe for payments);
- **Team members** within your agency or personal team as needed for the service;
- **Professional advisers** (legal, accounting) where necessary;
- **Authorities** where required by law or to protect rights and safety.

We do not sell your personal data.

## 7. International transfers

Some providers may process data outside the UK. Where that happens, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations, as applicable.

## 8. Retention

We keep personal data only as long as needed for the purposes above, including:

- account data while your account is active and for a reasonable period afterwards;
- billing and invoice records for statutory retention periods (typically up to 6 years);
- listing and enquiry records as needed to operate the service and resolve disputes;
- security logs for a shorter operational period unless needed for an investigation.

You may request deletion subject to legal retention requirements.

## 9. Cookies and similar technologies

BayMove may use:

- **Strictly necessary cookies** — session, authentication, security, and load-balancing;
- **Preference cookies** — remembering settings where offered;
- **Analytics cookies** — understanding how the site is used so we can improve it (only where used and, where required, with consent).

You can control cookies through your browser settings. Blocking some cookies may affect sign-in or other features. Where we introduce non-essential cookies that require consent under PECR, we will seek that consent before setting them.

## 10. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted transport (HTTPS), hashed passwords, access controls, and least-privilege practices with our processors. No online service is completely secure; please use a strong unique password.

## 11. Your rights

Under UK data protection law you may have the right to:

- access your personal data;
- rectify inaccurate data;
- erase data in certain circumstances;
- restrict or object to processing;
- data portability;
- withdraw consent where processing is based on consent;
- complain to the ICO.

To exercise your rights, contact our DPO at [dpo@2880.co.uk](mailto:dpo@2880.co.uk). We may need to verify your identity.

**ICO:** Information Commissioner’s Office — [https://ico.org.uk](https://ico.org.uk) — helpline 0303 123 1113.

## 12. Children

BayMove is aimed at adults. We do not knowingly collect personal data from children under 18 for accounts or listings.

## 13. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects about you within the meaning of UK GDPR. Automated checks (for example postcode coverage or payment fraud signals via our providers) may be used to operate the service.

## 14. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, where changes are material, provide additional notice where appropriate.

## 15. Contact

**Go Host Ltd**  
38 Carleton Street, Morecambe, LA4 4NY  
Company number: 16446520  

**Data Protection Officer:** Mike Brown — [dpo@2880.co.uk](mailto:dpo@2880.co.uk)

For our contractual terms, see the [Terms of Service](/terms-of-service).