Privacy Policy

Bofoh (“we”, “us”, “our”) is a UK-based technology enabled digital platform for the hospitality industry. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By creating an account or otherwise using Bofoh, you agree to the practices described here. If you do not agree, please do not use the platform.

1. Who is the data controller

Bofoh is the data controller for the personal data processed in connection with the platform. You can contact us about this policy or any privacy matter at [email protected].

2. Information we collect

• Account data includes your name, email address, password (hashed), and authentication identifiers from third-party sign-in providers.
• Listing data covers business name, role, location, categories, descriptions, contact details, and any other information you choose to publish.
• Usage data covers pages visited, actions taken, device and browser information, IP address, and approximate location.
• Communications means messages you send to us through email, support channels, or in-platform forms.

3. How we use your data

We process personal data to:

• Operate, secure and improve the platform.
• Verify trade eligibility and prevent fraudulent or abusive use.
• Display listings and enable connections between trade members.
• Send service messages (account, security, listing notifications).
• Send updates about Bofoh where you have opted in or where we have a legitimate interest in keeping members of the platform informed.
• Comply with legal obligations and enforce our Terms.

4. Legal bases

We rely on the following lawful bases under UK GDPR: performance of a contract (running your account and listing), legitimate interests (platform integrity, network growth, fraud prevention), consent (for optional marketing emails) and legal obligation.

5. Sharing your data

Listing details you choose to publish are visible to other verified Bofoh members and, where you make a listing public, to visitors of the site. We share personal data with service providers that help us run the platform (including authentication, hosting, analytics and email delivery) under appropriate contracts. We do not sell personal data.

We may disclose information where required by law, to protect our rights, or in connection with a corporate transaction such as a merger or acquisition.

6. Cookies and similar technologies

We use a small number of essential cookies for authentication and security, and limited analytics cookies to understand how the platform is used. You can control cookies through your browser settings.

7. International transfers

Where our service providers process data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

8. Data retention

We keep account and listing data for as long as your account is active. If you close your account we will delete or anonymise your personal data within a reasonable period, except where we need to keep it to comply with legal obligations or to resolve disputes.

9. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights contact [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We use technical and organisational measures appropriate to the sensitivity of the data we hold, including encryption in transit, strict access controls and regular review of our providers. No system is perfectly secure, so please choose a strong, unique password and tell us immediately if you suspect unauthorised access to your account.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email before they take effect.

12. Contact

Questions about this policy or how we handle your data? Email us at [email protected].