Innison respects the information entrusted to it.

Innison is operated as a sole trader, not a registered company. Aymane Cheikh, trading as Innison is responsible for the personal information described in this notice. Privacy questions, rights requests and direct marketing objections can be sent to aymanecheikh2002@gmail.com or made by telephone on +44 7494 195726. The Innison contact page is also available.

When an owner records guest details in Innison, the owner is responsible for that information, and Innison processes it on the owner’s behalf under a data processing agreement. Guests who want to exercise their rights should contact the property first, and Innison will help the owner respond.

This can include contact details, property and room information, reservation data, availability changes, support messages, authentication records, and technical information needed to keep the service reliable and secure. For prospective business customers, we may record a property name, public business contact details, source links, and notes about whether the property could use Innison.

Innison uses information to respond to enquiries, authenticate owners, provide property operations, maintain availability, process connected channel updates, prevent misuse, resolve support issues, and meet legal obligations.

Processing may be necessary to provide a requested service, take steps before entering an agreement, comply with law, or pursue legitimate interests such as security, support, and product improvement. Consent is used where the law requires it.

We may collect business contact details from property websites, tourism directories, and public company records to assess whether an independent accommodation operator could benefit from Innison. Our basis for this limited research is legitimate interests, after assessing its relevance, necessity, and the person’s reasonable expectations. We assess any proposed outreach separately. Where direct marketing rules require consent, we do not treat publication of contact details as consent. We do not use guest booking channels or guest enquiry forms for unsolicited marketing.

If we contact a business about Innison, we identify ourselves, explain where we found the contact details, link to this notice, and provide a way to object. We stop using personal information for direct marketing when someone objects. We review prospect records and remove details that are no longer needed, while retaining the minimum information needed to honour objections. Privacy questions and objections can be sent through the Innison contact page.

Innison uses essential authentication cookies so an owner can sign in and remain signed in securely. The service does not require advertising cookies to operate.

Vercel hosts the application and Neon hosts the database, both in London. Resend sends sign-in codes and links, invitations and the booking confirmations sent to guests, and forwards messages sent through the contact form. Cloudflare runs a scheduler that receives no personal information. Nothing about a property is sent to Channex until its owner starts connecting it to Booking.com. Channex then receives the property’s name, address, room categories and rates, and once the property is connected it exchanges reservations, availability and rates with Booking.com. Some of these providers are based in the United States, and any transfer relies on safeguards recognised by United Kingdom data protection law. Innison does not use advertising or analytics services.

Messages sent through the contact form are kept for up to twelve months after they are resolved. Account and workspace information, including guests and reservations, is kept while the workspace is open and deleted within 30 days of a closure request, although database backups hold it until they expire and Innison keeps any records the law requires. Application logs, which hide contact details, are kept for one hour.

Depending on applicable law, a person may request access, correction, deletion, restriction, portability, or an objection to processing. Privacy requests can be submitted through the Innison contact page, and Innison responds within one month.