Free lifetime digital guest guide included / Ships in 1-2 business days / No app required
HSHostShield

Privacy Policy

This policy explains how SIA AKAL processes personal data when you visit HostShield, place an order, manage a host account, or use a digital guest guidebook.

Last updated: 6 August 2026

Data controller

The data controller is SIA AKAL, registration number 40203537407, Gotfrīda iela 9, Krogsils, Ķekavas pagasts, Ķekavas novads, LV-2111, Latvia. Privacy enquiries can be sent to support@hostshield.store.

Personal data we collect

  • Identity and contact details, such as your name, email address, telephone number, billing address, and delivery address.
  • Order and transaction information, including products, amounts, shipping method, order status, refunds, and payment confirmation. Payment-card details are submitted directly to Stripe and are not stored by HostShield.
  • Host account data, property details, guest instructions, uploaded photos, emergency contacts, QR activation status, subscription status, and QR scan counts.
  • Messages sent to support and technical data such as IP address, browser and device information, timestamps, security logs, and cookie or consent preferences.

How we use personal data

We process personal data to:

  • process payments, fulfil orders, arrange delivery, and handle returns;
  • create and secure accounts and operate digital guest guidebooks;
  • provide requested translations, maps, email notices, and support;
  • measure QR scans and maintain the reliability and security of the service;
  • meet accounting, tax, consumer-protection, and other legal duties; and
  • prevent fraud, misuse, and unauthorised access.

Legal basis

We rely on performance of a contract when processing orders and providing HostShield services; legal obligations for tax, accounting, consumer, and regulatory records; legitimate interests in operating, securing, improving, and supporting the service; and consent where the law requires it, including for non-essential cookies or optional marketing. You may withdraw consent at any time without affecting processing carried out before withdrawal.

Service providers and transfers

We share data only where necessary with providers that support payment, hosting, database, email, content management, maps, translation, delivery, analytics, and customer support. Depending on the feature used, these providers may include Stripe, Supabase, Vercel, Resend, Sanity, Google, and Anthropic. We may also disclose data where required by law or to protect legal rights. Where data is processed outside the European Economic Area, we use an applicable transfer mechanism or rely on another lawful safeguard.

Retention

We keep personal data only as long as needed for the purpose for which it was collected. Account and guidebook data is generally kept while an account is active and for a reasonable period after closure. Order, invoice, tax, fraud-prevention, and dispute records may be retained for the period required by law or needed to establish or defend legal claims. Data that is no longer needed is deleted or anonymised.

Your privacy rights

Subject to applicable law, you may request access to your data, correction, deletion, restriction, portability, or objection to processing based on legitimate interests. You may also withdraw consent and lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or the data-protection authority where you live or work. To exercise a right, email support@hostshield.store. We may ask for information needed to verify your identity before completing a request.

Security and changes

We use technical and organisational safeguards intended to protect data against unauthorised access, loss, alteration, or disclosure. No online service can guarantee absolute security. We may update this policy when our services or legal obligations change; the current version and its update date will remain available on this page.