Privacy notice

Coble is run by the business named on our legal page. When this page says “Coble”, “we” or “us”, it means that business.

You can write to us at the address on our legal page.

When you book a place, your booking is with its owner, and the owner decides what your booking details are used for — so under data protection law the owner is the controller of those details. Coble runs the booking system for them and handles your details on their behalf under a written contract, so for those details Coble is the owner’s processor.

Coble is the controller of: Coble accounts, whether a guest’s or an owner’s; the directory and the reviews published on it; our own subscriptions with owners; and keeping the service secure.

For anything about a booking you can ask the owner directly, or ask us and we will pass it on.

When you book: your name, email address and, if you give it, a telephone number; how many people are coming; the dates or times; any add-ons and anything you tell the owner. Your card details are typed into Stripe’s own form and never reach Coble — we are told only whether the payment worked and for how much.

With a Coble account: your name and email address, your password (stored only in a form that cannot be turned back into it), a telephone number if you add one, and which bookings belong to you.

Owners and their teams: your name, email address and password, your two-step sign-in if you use it, your business’s details, prices and photographs, your subscription, and a record of changes made in the panel.

Reviews: the rating and words, the first name and initial shown with them, and which stay they are about.

When you use the site: our servers record what they need to run it safely — your IP address, the kind of browser, and the pages asked for and when. We do not use analytics or advertising tools that follow you around the web.

• To take and look after a booking — confirmations, reminders, payment requests, and what the owner needs to host you. Necessary for the contract you are making with the owner.
• To run your Coble account, or an owner’s subscription. Necessary for our contract with you.
• To keep the service secure and to prevent fraud and misuse, with records of who did what. Our legitimate interest in a safe service.
• To ask for, and publish, reviews of genuine stays — one email after you leave. Our legitimate interest, and the next guest’s, in honest reviews.
• To keep financial records that the law requires. A legal obligation.

We do not sell your details, use them for advertising, or send you marketing. No decision with legal or similarly significant effects on you is made by a computer alone.

• The owner of the place you book, who needs it to host you.
• Stripe, which takes card payments straight into the owner’s own Stripe account, and handles the owners’ subscriptions to Coble. Stripe uses payment information for fraud prevention and financial regulation under its own privacy policy.
• The providers that run Coble for us, who may use it only on our instructions: Hostinger (web hosting and the database), Brevo (sending email), Cloudflare (delivering the site securely) and Stripe (payments).
• Anyone the law requires us to tell, such as HMRC or the police with a proper request.

Some of these providers store or reach data outside the UK — Stripe and Cloudflare in the United States, Brevo in the European Union, for example. Where that happens it is protected by UK adequacy regulations or by the International Data Transfer Agreement or Addendum approved by the Information Commissioner, alongside the providers’ own security.

• Booking details: your name, email and telephone are removed 24 months after your last stay with an owner, unless the owner has chosen a different period. The dates and amounts stay for six years as accounting records, with nothing that identifies you.
• Coble accounts: until you delete the account.
• Owners’ accounts: while the subscription runs, then up to six years for accounts and legal claims.
• Reviews: for as long as they are published.
• Server records: for a short period for security, then deleted.

You can ask for a copy of what we hold about you, for it to be corrected or deleted, for its use to be restricted, to object to how it is used, and to have it in a form you can take elsewhere. With a Coble account you can download your information and delete the account yourself, from your account page. For anything else, write to us at the address on our legal page. We reply within a month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put it right first.

Everything travels over an encrypted connection. Passwords are stored only in a form that cannot be reversed. Owners can protect their accounts with two-step sign-in, and each member of an owner’s team sees only what their role allows. Card payments are handled entirely by Stripe.

Coble keeps only what it needs in your browser, and nothing for advertising or analytics. The cookies page lists each item.

Bookings and accounts are for people aged 18 and over.

When this notice changes, the date at the top changes with it. If the change matters to how your information is used, we will email account holders first.