Legal and compliance

What this covers

These pages are written for early customers, hotel staff, and pilot partners. They explain the current operating posture in plain English and should be reviewed before any production-scale rollout.

Standard items to keep on the radar

• Privacy notice for staff, prospects, and pilot contacts.
• Cookie notice and consent controls before any non-essential analytics or advertising cookies are added.
• Terms of use for the website and pilot software.
• Data processing terms or a data processing agreement for hotel customer data.
• Accessibility statement and regular accessibility checks.
• Retention, deletion, and export rules for pilot data.
• Subprocessor list before relying on more third-party services.
• Direct marketing consent records and unsubscribe handling.
• ICO data protection fee self-assessment if Nae Bother Solutions processes personal data as a controller.
• Security incident contact and breach response process.