Privacy policy

1. Who is responsible

IHOLDA LTD is the controller of personal information processed to operate DollarNap. Company number: 16890987. Registered office: Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ. For privacy questions or rights requests, email support@iholda.com with “DollarNap privacy” in the subject.

2. Information we use

• Account information: name, email, account role, verification status, sign-in and security records, and acceptance of our terms. Public account passwords are handled by our authentication provider.
• Guest verification: after your first paid booking, we request your full name, phone number and a government photo ID or passport photo page for private identity review. ID images are encrypted in storage and available only to you and authorised reviewers, not to your host. Verification status is retained so you do not need to repeat the review for each booking. Contact support to correct your details or make a data-rights request.
• Bookings and communication: chosen space and hours, requests, messages, check-in and check-out records, support correspondence, cancellations and disputes.
• Host and listing information: contact details, space address, approximate map location, availability, prices, photos, house rules and verification documents. Identity documents or a selfie may be requested for host verification; these are not public listing content.
• Payment information: amount, currency, provider references, payment status and, where needed, mobile-money number and refund or payout details. Payment providers collect the card or wallet authentication details needed to process the payment.
• Technical information: IP address, security logs, session identifiers and preferences. If you choose a nearby search and permit location access, we use the location supplied by your browser for that search.
• Evidence: photos and information you or another party submit about a stay, condition of a space, safety concern or payment dispute.

Most information comes from you. We also receive relevant information from the other booking party, authentication and payment providers, and verification or support activity.

3. Why we use it

We use account, booking, message and payment information to perform our contract with you, including providing the workspace, arranging bookings, processing payments and handling requests. Information needed for an account, a booking or a required host check must be supplied for that service to work.

We rely on legitimate interests to protect accounts, prevent fraud and abuse, maintain reliable systems, review safety issues and resolve disputes, balancing those purposes against your rights. We process records to meet applicable legal obligations where required. We seek consent for optional activities where the law requires it; a browser location permission can be refused or withdrawn. Agreeing to our terms is not blanket consent to unrelated uses of personal information.

We do not sell your personal information or use your private messages or verification documents for advertising. We do not use host selfies for automated facial-recognition matching. Automated availability, eligibility and payment checks support the service; you can ask support to review a decision affecting your booking or account.

4. Who receives information

Guests and hosts receive the information reasonably needed to arrange and fulfil their booking, including booking details and messages. Public listings show the space description, photos and an approximate location; precise access details are shared in the booking flow after acceptance. Do not put private contact or identity documents into public listing fields.

Authorised staff and service providers may process information for hosting, authentication, maps, payments, email, security and support. These include Google Cloud and Google identity services, Google Maps when used, and the payment provider selected at checkout (Stripe, Paystack or Fapshi). Support email is handled through our business email service. Payment providers also process information under their own legal obligations and privacy notices.

We may disclose relevant records where legally required, to protect people or resolve a claim, or as part of a genuine business transfer with appropriate protections. Access to private verification and case evidence is restricted.

5. Where information is processed

Our application is hosted in Google Cloud’s London region. Providers and their support operations may process information in other countries. Hosting in London does not mean every processing activity stays in the UK. Where UK data-transfer restrictions apply, we must use an applicable adequacy decision or appropriate safeguards, such as approved contractual protections, and assess the transfer as required. Contact us for information about the safeguards applicable to your data.

6. Keeping and protecting information

We keep information for as long as reasonably needed for the purpose it was collected: operating an active account, fulfilling bookings, resolving disputes, maintaining security and meeting applicable financial or legal recordkeeping requirements. The period depends on the record, unresolved matters and legal requirements; there is no promise that every record disappears when an account closes.

We use access controls, encrypted connections and protected storage for sensitive records. No service can guarantee complete security. Request account closure or deletion through support; we will explain any records we need to retain and why.

7. Your rights and choices

Depending on the applicable law, you may request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. You may withdraw consent for future processing where we rely on consent. These rights are subject to lawful exceptions.

Email support@iholda.com. We may ask for proportionate information to verify your identity; never send your password or wallet PIN. We normally respond to a UK data-rights request within one month, and will explain any lawful extension. You can complain to the UK Information Commissioner’s Office or another competent local regulator. You do not have to complain to us first.

See our cookies and preferences page for session and device storage. You can manage location access and delete stored site data through your browser.

8. Children and changes

DollarNap accounts are for adults aged 18 or over. Do not create an account for a child or upload unnecessary information about children. Contact us if you believe we hold such information inappropriately.

This notice applies from 2 November 2026. We will update it when our processing changes and provide additional notice where appropriate.