1. Who we are
DoorHills (“DoorHills”, “we”, “us”) provides remote co-hosting and guest management for short-term rental hosts and property managers. We operate the website doorhills.com.
For data about website visitors, people who enquire, and our clients, DoorHills is the controller. For data about our clients' guests, we act as a processor on the client's behalf — see section 4. You can reach us at any time at contact@doorhills.com.
2. What we collect
When you use our contact form or email us
- Your name and email address.
- The number of listings you have, the platforms or software you use, and anything you write in your message.
- The content of any emails, messages or calls you have with us.
When you become a client
- Contact and billing details, and payment records.
- Property information you give us to run your listings — house rules, check-in instructions, access codes, Wi-Fi details, cleaner and vendor contacts.
- Access to your booking platform or property-management software through the co-host or user permissions you grant us. We never ask for your account password.
Automatically, when you visit the website
- Our hosting provider records standard server logs — IP address, browser type, pages requested and the time of the request — to deliver the site and keep it secure.
- We do not use analytics, advertising or tracking cookies.
3. How we use it and why
We only use personal data where the law allows it:
- To answer your enquiry and prepare a proposal — because you asked us to, as steps before entering into a contract.
- To provide our services — managing guest messages, reservations, cleaning and maintenance coordination, reviews and the other services in your plan — to perform our contract with you.
- To invoice, keep accounts and meet legal obligations — because the law requires it.
- To keep our website and systems secure, and to improve our service — in our legitimate interests, balanced against your rights.
- To send occasional news or offers — only if you have opted in, and you can opt out at any time.
We do not sell personal data, and we do not use it for automated decision-making that affects you.
4. Guest data we handle for hosts
To run a client's listings we see information about their guests — for example names, messages, booking dates, guest counts and, where the host requires it, identity documents for check-in or local registration. For this data the host is the controller and DoorHills is their processor. That means we:
- use guest data only to provide the services the host has asked for, and on the host's instructions;
- keep it confidential and limit access to the team members who need it;
- don't use it for our own marketing or share it with anyone the host hasn't authorised;
- help the host respond to guests' data-protection requests; and
- delete or return it when our service ends (see section 7).
Guests: booking platforms such as Airbnb, Vrbo and Booking.com also process your data under their own privacy policies. If you have a question about how your host handles your data, please contact your host, or email us and we'll pass it on.
A data processing agreement is available to clients on request.
5. Who we share it with
We share personal data only with service providers who help us run DoorHills, and only as much as they need:
- Website hosting — Vercel Inc. hosts this website and processes server logs.
- Email — Hostinger provides our email service, including contact-form messages.
- Scheduling and messaging — if you choose to book a call or message us through a scheduling tool or WhatsApp, that provider processes your data under its own terms.
- Booking platforms and property-management software — the systems you ask us to work in.
- Your local team — we pass cleaners, maintenance providers and other vendors the details they need to do their job (for example, a check-out time or a guest's maintenance request).
- Payment providers, accountants and legal advisers, and public authorities where the law requires us to.
6. International transfers
DoorHills is based in Pakistan, and some of our service providers are based in other countries, including the United States. This means personal data from the UK or the European Economic Area may be transferred outside those regions. Where we do this, we rely on appropriate safeguards required by UK and EU law, such as the Standard Contractual Clauses approved by the European Commission (and the UK Addendum), and we only work with providers that protect data to an equivalent standard.
7. How long we keep it
- Enquiries that don't lead to working together: up to 24 months, then deleted.
- Client records: for as long as we work together, and then for up to 6 years for accounting, tax and legal purposes.
- Guest data: only while we provide services for that listing. Within 30 days of the service ending we delete it or return it to the host, unless the law requires us to keep it. Data held on booking platforms stays under the platform's and host's control.
- Server logs: kept by our hosting provider for a short period, typically no more than 30 days.
8. Security
We protect personal data with access controls, multi-factor authentication on our accounts, encrypted connections (HTTPS/TLS), and by giving team members access only to the listings and tools they work on. We use the platform permissions you grant us rather than shared passwords. No system is perfectly secure, but if a breach affects your data we will notify you, and the relevant authorities, as the law requires.
9. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use your data, including for direct marketing;
- receive your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email contact@doorhills.com. We'll respond within one month. We may ask you to confirm your identity first.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to a data-protection authority — in the UK, the Information Commissioner's Office (ico.org.uk), or in the EU, the supervisory authority in the country where you live or work.
10. Cookies
The DoorHills website does not set tracking, analytics or advertising cookies, and our fonts are served from our own domain. If a feature ever needs cookies that aren't strictly necessary, we'll update this policy and ask for your consent first. External sites we link to (such as LinkedIn or a booking page) have their own cookie policies.
11. Children
Our services are for businesses and adults. We don't knowingly collect data from anyone under 18.
12. Changes to this policy
We may update this policy as our services change. The date at the top shows when it was last updated, and we'll tell clients by email about any significant change.
13. Contact us
Questions about this policy or your data? Email contact@doorhills.com. See also our Terms of Service.