GDPR Compliance

Right of access, rectification, erasure, restriction, portability, and to object to processing. You can also withdraw consent at any time.

We process data under contract (to deliver the service), legitimate interest (fraud prevention, product improvement), and consent (marketing).

We keep account data while your account is active and for a limited period afterward to meet legal obligations.

Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

Email dpo@sideaway.com or use the export/delete tools in Settings. We respond within 30 days.