Legal
Privacy Policy
Last updated: 23 July 2026 · Ficaqui Homes Ltd
Ficaqui Homes Ltd ("Ficaqui", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our platform at ficaqui.uk.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Ficaqui Homes Ltd is registered in England and Wales. We operate the Ficaqui property rental platform connecting guests and landlords worldwide.
Contact: support@ficaqui.app
2. What data we collect
Account information:
- Name, email address, date of birth
- Account type (guest, student, or host/landlord)
- Password (stored encrypted — we never see it)
- Phone number (optional)
Booking information:
- Property details, dates, amount paid
- Check-in/check-out status and PIN
- Booking reference number
Payment information:
- Payment is processed by Stripe — we do not store card details
- We receive confirmation of payment and transaction reference only
Communications:
- Messages sent between guests and hosts via our chat system
- Files, images and documents shared in chat
Technical data:
- IP address, browser type, device information
- Pages visited and time spent on our platform
3. How we use your data
- To create and manage your account
- To process bookings and payments
- To send booking confirmations, PINs and check-in/check-out notifications by email
- To enable communication between guests and hosts
- To verify identity and prevent fraud
- To improve our platform and services
- To comply with legal obligations
4. Legal basis for processing
- Contract — to perform the booking contract between you and Ficaqui
- Legitimate interests — to prevent fraud and improve our services
- Legal obligation — to comply with UK law
- Consent — for marketing communications (you can opt out at any time)
5. Who we share your data with
- Stripe — payment processing (stripe.com/privacy)
- Supabase — secure database and authentication hosting
- Resend — transactional email delivery
- Vercel — website hosting
- Other guests/hosts — your email is shared with the other party in a booking to enable communication
We do not sell your personal data to third parties.
6. Address protection
Property addresses are revealed in 3 stages:
- Stage 1 — Area only (visible to everyone)
- Stage 2 — Street name (after login)
- Stage 3 — Full address (after payment confirmed)
Host addresses are never publicly exposed. Full address is only shared with confirmed guests by secure email.
7. Data retention
- Account data: retained while your account is active + 2 years after deletion
- Booking records: retained for 7 years (UK tax law requirement)
- Chat messages: retained for 2 years
- Payment records: retained for 7 years
8. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a portable format
- Objection — object to processing based on legitimate interests
- Restriction — request restriction of processing
To exercise any of these rights, contact us at support@ficaqui.app. We will respond within 30 days.
9. Cookies
We use essential cookies to keep you logged in and remember your preferences. We ask for your consent before using analytics cookies. You can manage your cookie preferences at any time using the cookie banner on our website.
10. Security
We use industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Encrypted passwords (never stored in plain text)
- Row-level security on our database
- Stripe PCI-DSS compliant payment processing
11. International transfers
Some of our service providers (Supabase, Stripe, Vercel) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR.
12. Children
Our platform requires users to be 18 or over. Users under 18 require parental authorisation. We do not knowingly collect data from children under 13.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you by email of any significant changes. Continued use of our platform after changes constitutes acceptance.
14. Contact and complaints
If you have any questions or concerns about how we handle your data, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.