Legal

Privacy Policy

How we collect, use and protect personal data, both yours as a customer and your guests' as data we process on your behalf.

Last updated 16 October 2026.

Who we are

thelobbyboy is a hotel operating platform operated by The Lobby Boy L.L.C., TechPark Prishtina, Bernicë e Poshtme, 10000 Prishtina, Kosovo. For the personal data of your guests we act as a processor, and you, the property, remain the controller. For your own account data we act as the controller.

What we collect

For customers we collect account details, billing information and product usage data. On behalf of properties we process guest data entered into the platform: names, contact details, reservation and folio records, identity documents where local law requires them, and any preferences your team records.

We do not store card numbers. Payment details are handled by the payment provider when they are captured, and only a reference and the last four digits are kept on the guest’s bill.

Why we process it

Customer data is processed to provide and bill for the service, under the contract between us. Guest data is processed on your documented instructions, under the data processing agreement that forms part of our terms. Where a stay requires a report to a police or tourism authority, that processing is carried out to meet a legal obligation that applies to your property.

How long we keep it

Identity documents expire automatically once the retention period set by your local legislation has passed. Folio and invoice records are kept for the statutory tax period. Account data is deleted within ninety days of the end of a subscription, and backups age out within a further thirty-five days.

Where it lives

Guest data is hosted exclusively within the European Union. A current list of sub-processors, including hosting, email and payment providers, is available on request and is updated with thirty days’ notice before any change.

Cookies and advertising

This website uses the Meta Pixel, a tool from Meta, the company behind Facebook and Instagram. It helps us measure our adverts on those services and show them to people likely to be interested. The pixel tells Meta which pages you open here, the page you came from, your IP address and basic details of your browser and device. It also tells Meta when you send one of our forms: a demo request, a contact message, an affiliate application or a newsletter sign-up.

To recognise your browser when you come back, the pixel sets a cookie named _fbp, which lasts ninety days from your latest visit. If you arrive from one of our adverts, it keeps that click in a second cookie, _fbc. If you use Facebook or Instagram, Meta may link these visits to your account. Meta uses this data under its own privacy policy and may process it outside the European Union.

The pixel only runs if you accept cookies in the notice shown on your first visit, and you can change your choice at any time under Cookie settings at the bottom of our pages. You can also delete or block these cookies in your browser’s settings. To stop Meta choosing your ads from your activity on other websites, change your ad preferences with Meta. How Meta handles the data is set out in its privacy policy.

Your rights

You may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing. Guests should contact the property they stayed with, who can complete most requests themselves from within the platform. Write to info@thelobbyboy.com and we will respond within thirty days.

Contact

The Lobby Boy L.L.C., TechPark Prishtina, Bernicë e Poshtme, 10000 Prishtina, Kosovo. Email info@thelobbyboy.com, phone +383 48 577 500.

Questions about data? Ask before you sign.