Privacy policy

Who we are

Deskhops is operated by Top Reds Ltd, a company registered in England and Wales (number 17532182), whose registered office is Flat 1, 69 Camberwell Grove, London, England, SE5 8JE. We are the data controller for the personal data described here, and our ICO registration number is ZC281295.

For anything in this policy, email info@deskhops.com.

What we collect

When you sign in: your email address. We never ask for a password — we send you a link instead.

If you sign in with Google: your email address, your name and your profile picture, which Google gives us when you agree to it. We never see your Google password, and we can't read anything else in your Google account. Signing in with Google and signing in by email give you the same Deskhops account, matched on your email address.

When you use the site: your name if you give us one, and a profile photo if you upload one.

When you book: the space, dates and times, the amount paid, and messages between you and the host.

When you host: your listing, its address, your photos, and the bank details our payment provider needs to pay you. We do not see or store your bank details ourselves.

When you use the Deskhops Pass: where and when you checked in at a partner space, and the points that earned.

Automatically: a short-lived record of sign-in requests, kept to stop abuse. Your IP address is stored as an irreversible hash, never in a readable form.

Why we're allowed to use it

To provide the service — bookings, messages, your Pass. This is necessary to perform our contract with you.

To keep the service safe — preventing fraud and abuse. This is our legitimate interest in running a service that isn't abused.

To meet legal obligations — keeping records of transactions for tax purposes.

Marketing emails — only if you ask for them. You can withdraw that at any time, and it never affects anything else.

Who else sees it

Hosts and guests see each other's first name and the booking details, so they can let each other in. Hosts never see your surname or email address.

Partner staff scanning your Pass see your first name and that your Pass is valid. They do not see your email address or surname.

Our suppliers , who process data on our behalf under contract: Cloudflare (hosting), Supabase (database and photo storage), Resend (email delivery) and Stripe (payments). Stripe handles your card details directly — we never see or store them.

We never sell your personal data.

Where it's kept

Our database and photo storage are hosted in the European Union (Ireland). Some suppliers may process data outside the UK; where they do, we rely on the UK's approved transfer safeguards.

How long we keep it

Your account — until you delete it.

Bookings and payments — six years after the booking, because we have to keep financial records.

Sign-in records — 24 hours.

Messages — until you delete your account.

When you delete your account we remove your personal data. Anonymous totals a host needs for their own records are kept without anything identifying you.

Your rights

Under UK data protection law you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; or send it to another service.

To do any of these, email info@deskhops.com. We'll respond within one month.

If you think we've got it wrong, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd be grateful for the chance to put it right first.

Cookies

We only use cookies and similar storage that the site needs to work — to keep you signed in, keep forms secure and remember an invite you followed. We do not use advertising or tracking cookies. See our cookie policy for the detail.