Understand what information is used, why it is needed and the choices available to you.
Scope & responsibility
This policy covers the Lodge Deck marketing website, enquiries and hospitality platform, operated by Grandscale Digital, registered in Nigeria. Grandscale Digital is the data controller for personal information it uses to manage its website, customer relationships and accounts. You can contact us at [email protected].
A property using Lodge Deck generally decides why and how its guests’ and staff members’ information is processed. For those records, the property acts as the data controller and Lodge Deck processes information on its behalf, subject to the agreed instructions and applicable law. If your enquiry concerns a stay, contact the property first. Its own privacy notice also applies.
Information we handle
The information involved depends on how you interact with Lodge Deck:
- Enquiries: the name, work email, property name and optional room count submitted in the demo form, together with the request date and any follow-up correspondence.
- Accounts and subscriptions: account contact details, property details, staff access permissions, plan information and billing or transaction references needed to administer the service.
- Property operations: guest contact details, reservations, stay history, room assignments, notes, folio charges, recorded payments and balances entered by authorised property users or received through a connected service.
- Support and Solis: messages, attachments and task context you choose to submit, and relevant property information needed to respond to an authorised request.
- Technical information: servers and service providers may process IP addresses, browser or device information, request times, session identifiers and error or security records to deliver and protect the service.
How & why information is used
Information is used to answer enquiries, arrange demonstrations, create and administer accounts, deliver property workflows, process billing, provide support and investigate errors or misuse. It may also be needed to keep legally required records or resolve a dispute.
Where data-protection law requires a legal basis, processing may be necessary to take steps at your request or perform a contract, comply with a legal obligation, or pursue legitimate interests such as securing the service and responding to business enquiries, balanced against your rights. We rely on consent where it is required; you can withdraw it without affecting earlier lawful processing.
Submitting a demo request does not by itself subscribe you to unrelated promotional communications. Information provided by a property is processed for that property’s authorised purposes and under the applicable agreement.
AI-assisted features
When Solis is configured and used, the request and relevant property context may be processed by the configured AI provider to generate a response. Avoid including personal or sensitive information that is not needed for the task. Ask our team about the applicable provider and processing terms for your deployment.
Solis responses require human judgement, and supported operational changes that require approval remain subject to an authorised user’s confirmation. Do not treat a generated response as an independent decision about a guest or staff member.
Retention & security
Information is retained for the purpose for which it was collected, taking account of the customer relationship, service delivery, legal record-keeping duties and unresolved claims. For enquiries, this includes responding and following up; for subscriptions, it includes account administration and required billing records. There is no single retention period for every category.
Property records are subject to the customer’s instructions and any agreed return or deletion arrangements, together with applicable legal duties. Contact us to discuss a deletion request or records needed before an account closes. Information retained for a legal obligation should be limited to that purpose.
Access permissions and operational safeguards help protect information. No website or online service can eliminate every security risk. Keep account credentials private, review staff permissions and report suspected unauthorised access promptly through the Help Centre.
Where processing takes place
Connected providers and service infrastructure may process information in countries other than your own. The locations and arrangements depend on the services enabled for your account. Contact us for information about the processing arrangements relevant to your property.
Where applicable law requires a safeguard for an international transfer, the transfer must be supported by an appropriate legal mechanism and any other required protections. This policy does not promise a particular hosting country or data-residency option.
Your choices & privacy rights
Depending on the law that applies, you may request access to your personal information, correction, deletion, restriction or objection to processing, or a portable copy. You may also withdraw consent where processing relies on it and raise concerns about automated decisions.
Email [email protected] with your privacy request and describe the information or account involved. We may need to verify your identity and authority before acting. If the request concerns records controlled by a property, we may direct it to that property or assist it in responding. Rights can be subject to lawful exceptions and the applicable response deadlines.
You may complain to the data-protection authority with jurisdiction over your information. In Nigeria, this is the Nigeria Data Protection Commission. Contacting us first does not remove that right.
Children & sensitive information
Lodge Deck’s business website and property-management accounts are intended for professional use, not for children. A property may need to record information about guests who are children as part of a stay; the property is responsible for the appropriate notices, permissions and lawful basis.
Do not put unnecessary identity documents, health information or other sensitive information into demo requests, public feedback or general support messages. If such information is needed for a legitimate property workflow, apply the relevant access and legal requirements.
Updates to this policy
This policy may change when our services or processing practices change. The date at the top identifies the current version. Material changes will be communicated through an appropriate channel where required by law. A new processing purpose that requires consent will not rely solely on updating this page.
Have a privacy question?
Email our team with your question or privacy request. Include the account or property involved, without sharing unnecessary sensitive information.
Grandscale Digital · Registered in Nigeria