Privacy Policy
What personal data SSOT Analytics collects through ssotanalytics.com, why, and what rights you have.
What this policy covers
It covers this website only. Data that hotel clients load into the SSOT platform at app.ssotanalytics.com is governed by the client agreement and Data Processing Agreement.
Who we are
SSOT Analytics is a trading name of Macexperience Limited, a company registered in Ireland (CRO number 600351). Registered office: 23 Woodberry, Greenfields, Ballincollig, Cork P31 Y573, Ireland.
We are the data controller for the personal data described here. Contact: colin@ssotanalytics.com or 086 813 8027.
What we collect
- When you request a demo: your name, work email, hotel name, number of rooms, your position, and anything you write in the message box. Please don’t include sensitive personal information in the message box.
- When you contact us: your emails, phone calls and the details you choose to share.
- When you use the site, only if you accept analytics cookies: pages viewed, time on site, device and browser type, approximate location (country or city), and a random identifier that tells one visitor from another. See our Cookie Policy.
- Technical data: your IP address and browser details reach our hosting provider and, on the hotel map, Mapbox, because they are needed to deliver pages and map tiles. We may record requests, including IP addresses, in server logs that we use to keep the site secure and running.
- Hotel map accounts (when launched): if you sign up to compare your hotel against the market, your name, work email, hotel, role and the information we use to verify that you work there.
A hotel’s name, room numbers and facilities are business information about the hotel, not personal data.
Why we use it, and our lawful basis
| Purpose | Lawful basis (GDPR Article 6) |
|---|---|
| Responding to your demo request or enquiry | Lawful basis (GDPR Article 6)Steps you ask us to take before a contract; our legitimate interest in responding to business enquiries |
| Following up about our services | Lawful basis (GDPR Article 6)Legitimate interest in developing business relationships. Every message lets you opt out |
| Website analytics | Lawful basis (GDPR Article 6)Your consent, given through the cookie banner. You can withdraw it at any time |
| Running hotel map accounts and verifying users | Lawful basis (GDPR Article 6)Performing our agreement with you |
| Keeping the site secure | Lawful basis (GDPR Article 6)Legitimate interest in protecting our site and users |
| Keeping business and tax records | Lawful basis (GDPR Article 6)Legal obligation |
We don’t sell your data. We don’t use it for automated decisions that affect you.
Who we share it with
We use these service providers, under contracts that require them to protect your data and use it only on our instructions:
- Google Ireland Limited: business email (Google Workspace) and, if you consent, Google Analytics.
- Microsoft Azure (West Europe region, in the Netherlands): website hosting.
- Twilio SendGrid: delivering demo request submissions to our email. The website itself doesn’t store them.
- Mapbox: drawing the hotel map, when you open it.
We may also share data with our professional advisers, or with authorities where the law requires it.
Transfers outside the EU
Some providers, including Google, Twilio SendGrid and Mapbox, may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep it
| Data | Retention |
|---|---|
| Enquiries from people who don’t become clients | Retention2 years after our last contact, then deleted |
| Client contact details and correspondence | RetentionFor the contract, plus 6 years |
| Opt-out requests | RetentionA minimal record, kept so we don’t contact you again |
| Google Analytics data | Retention14 months |
| Server logs, including IP addresses | RetentionUp to 90 days |
Your rights
You can ask us to:
- give you a copy of your personal data
- correct inaccurate data
- delete your data
- restrict how we use it
- give you your data in a portable format
You can also object to our use of your data based on legitimate interests. You can object to direct marketing at any time, and we will stop. Where we rely on consent, you can withdraw it at any time.
Email colin@ssotanalytics.com to use any of these rights. We reply within one month.
Complaints
If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Data Protection Commission: dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
Security
We use encrypted connections (HTTPS), access controls and reputable providers. No system is completely secure, but we work to protect your data and will notify you and the Data Protection Commission of a breach where the law requires.
Children
This site is for hotel businesses. It isn’t directed at anyone under 18.
Changes
We will update this policy when our practices change and show the date at the top. Our Terms of Use cover the rest of your use of the site.