Security & data
We verify the ID. Then we delete it.
Safeguest applies UK GDPR and EU GDPR-equivalent data-protection standards to every Host and Guest, wherever they are in the world. Reviewed by UK-qualified data-protection counsel. Nothing is kept longer than it needs to be.
What that means in practice
Six specifics, no compliance theatre.
Your ID isn't hanging around
Identity documents and biometric selfies are used to complete the verification event, then deleted immediately. We're a pass-through, not an archive.
UK/EU GDPR-equivalent, everywhere
We apply UK GDPR and EU GDPR-equivalent standards to every Host and Guest, wherever they are — not just the local minimum. There is no such thing as GDPR certification, so we don't claim one.
Written by actual lawyers
Our data-processing terms were developed with UK-qualified data-protection counsel following an EU-compliant legal review. Purpose limitation, breach notification, data-subject rights, minimal retention.
Encrypted in transit and at rest
Role-based access, authentication, industry-standard cloud storage, and ongoing monitoring. Dull, essential, done.
Hosts stay the controller
For guest verification and risk screening, the Host or property manager is the data controller and Safeguest is the processor, acting on their instruction.
No automated decisions about people
Our verification and Risk Status models flag and inform. They never decide who gets to book — that call belongs to the host, every time.
The paperwork
Everything, by its proper name.
One Privacy Notice. Hosts and guests are covered by the same Privacy Notice. Hosts who want the optional paid Safeguest Protect damage-payment service will see the separate enrollment agreement during sign-up.