Privacy Policy

1. Who We Are

HOAM Hospitality Ltd ("HOAM", "we", "our", "us") operates the HOAM platform - a verified hospitality career marketplace connecting talent, employers, recruiters, and training organisations. We are registered in England and Wales and act as a data controller under UK GDPR and the Data Protection Act 2018.

2. Data We Collect

• Identity data: Full name, email address, profile photo
• Professional data: Employment history, skills, certifications, qualifications
• Account data: Login credentials, role, tier, account preferences
• Usage data: Pages visited, features used, session duration
• Location data: Only when you explicitly permit it, to show nearby shifts
• Device data: Device type, operating system, push notification token (if enabled)
• Documents: CVs, certifications, and identity documents you choose to upload

3. How We Use Your Data

• To create and manage your account
• To match you with relevant shifts, candidates, or training opportunities
• To send platform notifications (shift alerts, application updates, reminders)
• To verify skills, certifications, and employment history
• To improve the platform through aggregated, anonymised analytics
• To comply with legal obligations

We do not sell your personal data to third parties.

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR: (a) contractual necessity - to provide the platform services; (b) legitimate interests - to improve and secure the platform; (c) consent - for optional features such as marketing emails and location access; (d) legal obligation - where required by law.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where we are required to retain it by law (e.g. for fraud prevention or tax purposes). You can request account deletion at any time from within the app under Profile → Settings → Delete Account.

6. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@hoam.io. You also have the right to lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk.

7. Cookies & Analytics

We use PostHog for product analytics (page views, feature usage). This is anonymised and aggregated. We do not use advertising cookies. You can opt out of analytics tracking by contacting us.

8. Data Security

We apply industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. No method of transmission or storage is 100% secure - we cannot guarantee absolute security but we take reasonable steps to protect your data.

9. Third-Party Services

HOAM uses the following third-party processors: Base44 (infrastructure), Google (Maps, Places API), PostHog (analytics). Each processor is bound by data processing agreements and GDPR-compliant data handling obligations.

10. Contact

For any privacy-related questions: privacy@hoam.io