Legal

Privacy Policy

How EazyRoom collects, uses, stores, and protects personal data.

Last updated: June 2026 | Applies to: www.eazyroom.ie

1. Who We Are

EazyRoom is an online marketplace platform that connects hosts who wish to rent out rooms with tenants seeking accommodation across Ireland. EazyRoom acts as an intermediary between hosts and tenants and is the Data Controller for the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Acts 1988–2018.

For all data protection queries, please contact our Data Protection Officer:

Email: dpo@eazyroom.ie

Website: www.eazyroom.ie

Post: EazyRoom, [Registered Address — to be inserted before go-live]

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store, share and protect your personal data when you:

Visit or use the EazyRoom website (www.eazyroom.ie)

Submit identity verification documents

Make or receive payments through our platform

Communicate with us or other users through EazyRoom

By using EazyRoom, you acknowledge that you have read and understood this Privacy Policy.

3. Personal Data We Collect

3.1 Information You Provide to Us

Host Information:

Full name, email address, phone number and date of birth

Home address and property address(es)

Listing descriptions, photos and room availability

Bank account details for receiving rent payments directly from tenants

Tenant Information:

Full name, email address, phone number and date of birth

Current address and desired location preferences

Payment card details for the EazyRoom Service Fee (€240) processed via Stripe

Any additional information you choose to provide in your profile

Identity Verification (all users):

Government-issued photo ID (passport, driving licence or national identity card)

Identity documents are reviewed manually by EazyRoom staff and are not shared with third-party automated verification systems

Communications:

Messages sent between users through our platform

Emails, support requests and feedback you send to us

3.2 Information Collected Automatically

IP address, browser type, device type and operating system

Pages visited, search queries and interactions on the platform

Cookies and similar tracking technologies (see our Cookie Policy)

3.3 Information from Third Parties

Payment status and fraud signals from Stripe Payments Europe Limited (Dublin)

Information from social media platforms if you register or log in via them

4. Our Lawful Basis for Processing

Under GDPR Article 6, we rely on the following lawful bases:

Contract performance (Article 6(1)(b)): Processing necessary to provide our platform services, facilitate bookings and process the Service Fee payment.

Legal obligation (Article 6(1)(c)): Processing necessary to comply with anti-money laundering (AML) laws, identity verification requirements, tax obligations and other applicable Irish and EU law.

Legitimate interests (Article 6(1)(f)): Fraud prevention, platform security, improving our services and marketing to existing users — where these interests are not overridden by your rights.

Consent (Article 6(1)(a)): Where you have opted in to marketing communications, non-essential cookies, or optional profile features. You may withdraw consent at any time.

Where we process identity document data, we rely on Article 6(1)(b) (contract performance) and Article 6(1)(c) (legal obligation). As identity documents are reviewed manually by EazyRoom staff, we have implemented strict internal access controls and conduct a Data Protection Impact Assessment (DPIA) for this process.

5. How We Use Your Personal Data

To create and manage your EazyRoom account

To facilitate room bookings between hosts and tenants

To verify your identity manually and prevent fraud and misuse of our platform

To process the EazyRoom Service Fee (€240) securely through Stripe

To communicate with you about your bookings, account and our services

To assist in resolving disputes between hosts and tenants where possible

To comply with our legal and regulatory obligations

To improve, maintain and protect the EazyRoom platform

To send you marketing communications where you have consented or we have a legitimate interest (you can opt out at any time by emailing dpo@eazyroom.ie)

6. Identity Verification

EazyRoom verifies the identity of all hosts and tenants to maintain a safe and trusted platform. Identity verification is carried out manually by trained EazyRoom staff. We do not use automated decision-making or third-party automated verification tools for this process.

Identity documents submitted for verification:

Are accessed only by authorised EazyRoom staff on a need-to-know basis

Are stored securely on Vercel infrastructure within the EEA

Are never sold or shared with any third party except where required by law

Are retained for 3 years after account closure, after which they are securely and permanently deleted

We conduct a Data Protection Impact Assessment (DPIA) for our manual ID verification process, as required under GDPR Article 35.

7. Who We Share Your Data With

We do not sell your personal data. We share it only in the following circumstances:

7.1 Between Hosts and Tenants

When a booking is confirmed, we share limited information between the host and tenant necessary to complete the arrangement — such as names and contact details. We do not share payment card details or identity documents between users.

7.2 Third-Party Processors

Stripe Payments Europe Limited (Dublin) — processing of the EazyRoom Service Fee and fraud detection

Vercel Inc. — cloud hosting and storage of platform data (EEA servers)

Email and communication service providers — sending platform notifications

All third-party processors are bound by Data Processing Agreements and must comply with GDPR.

7.3 Legal and Regulatory Disclosure

We may disclose your data to courts, law enforcement, the Revenue Commissioners, the Data Protection Commission or other authorities where required by law or to protect the rights, safety or property of EazyRoom, our users or others.

7.4 Business Transfers

In the event of a merger, acquisition or sale of EazyRoom, your data may be transferred as part of that transaction. We will notify you in advance of any such change.

7.5 Changes to Our Third-Party Processors

If we add, remove or change a third-party processor who handles your personal data in a way that materially changes how your data is processed, we will update this Privacy Policy and notify users by email at least 30 days before the change takes effect, in line with section 15 (Changes to This Privacy Policy).

8. International Data Transfers

EazyRoom is based in Ireland and stores data on Vercel infrastructure. Where Vercel processes data outside the EEA, this is governed by Standard Contractual Clauses (SCCs) approved by the European Commission in accordance with GDPR Chapter V.

Stripe's European operations are managed through Stripe Payments Europe Limited, based in Dublin, so Service Fee payment data remains within the EEA.

9. Data Retention

Account data: retained for the duration of your account plus 7 years to comply with Irish tax and legal obligations

Booking records: 7 years after the booking date for legal and tax compliance

Identity documents: 3 years after account closure, then securely deleted

Service Fee payment records: 7 years as required by Revenue and AML obligations

Marketing data: until you opt out or withdraw consent

10. Your Rights Under GDPR

As an EU/EEA data subject, you have the following rights under GDPR Articles 15–22:

Right of access (Art. 15): Request a copy of the personal data we hold about you

Right to rectification (Art. 16): Request correction of inaccurate or incomplete data

Right to erasure (Art. 17): Request deletion of your data, subject to our legal obligations

Right to restriction (Art. 18): Request that we limit how we use your data in certain circumstances

Right to data portability (Art. 20): Receive your data in a structured, machine-readable format

Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing

Right to withdraw consent: Withdraw any consent at any time without affecting prior processing

To exercise any of these rights, please email dpo@eazyroom.ie. We will respond within one month as required by GDPR Article 12. We do not charge a fee for exercising your rights.

11. Right to Lodge a Complaint

If you are unhappy with how we handle your personal data, please contact us first at dpo@eazyroom.ie and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

Website: www.dataprotection.ie

Phone: +353 (0)761 104 800

Post: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit

Encryption of data at rest on Vercel infrastructure

Strict internal access controls for identity documents

Regular security assessments and monitoring

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and will inform affected users where required under GDPR Article 34.

13. Cookies

EazyRoom uses cookies and similar technologies. Non-essential cookies are only placed with your explicit consent. For full details please see our Cookie Policy at www.eazyroom.ie/legal/cookie-policy.

14. Children's Data

EazyRoom is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact dpo@eazyroom.ie immediately.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 30 days before the changes take effect. The current version is always available at www.eazyroom.ie/legal/privacy.

16. Contact Us

For any questions or requests relating to this Privacy Policy or your personal data:

Email: dpo@eazyroom.ie

Website: www.eazyroom.ie

Post: EazyRoom, [Registered Address — to be inserted before go-live]