Privacy policy

Last updated 18 October 2026

We collect only what we need to run a safe community, we never sell your data, and you can ask for a copy or delete it at any time.

1. Who we are

[Company name] Ltd runs London Abbai and controls your personal data (company number [company number], ICO registration [ICO registration number]). To ask about your data, email privacy@londonabbai.com or use the contact form and choose “My data”.

2. What we collect

Account: your name, email, home city or university, your 18+ and terms ticks, and your newsletter choice.
WhatsApp number: when you verify it before your first post.
What you post: rooms, jobs, businesses, reviews, guides, questions and photos, plus the postcode area of a room or business (never the full address on the map).
Tickets: the buyer’s name and email, and each guest’s name.
Messages to our team: what you write in the contact form and help requests.
Safety data: a scrambled (hashed) form of your device’s network address, so we can stop spam and repeat sign-ups. We can’t turn it back into the address.
Payments (when they start): our payment provider, Stripe, handles card details. We never see or store your full card number.

3. Why we use it, and our legal reasons

To run your account and show your posts: to keep our contract with you.
To keep members safe: checks before posts go live, WhatsApp verification, spam limits and reports. We rely on our legitimate interest in a safe community.
To answer your messages: our contract with you, or our legitimate interest when you aren’t a member.
To send tickets, codes and updates about your posts: our contract with you.
Newsletter and daily summaries: only with your consent. You can switch them off in Settings at any time.
Records the law asks us to keep, such as payment records for tax: our legal duty.

4. What other members see

Your posts, with your first name.
Your WhatsApp link, only for signed-in members who tap “Contact” on your post and accept our safety terms. We never show your email.
Event organisers see the names on the tickets for their event, to check guests in. They don’t see emails.
Guide writers show their first name and home city.

5. Who helps us run the site

We use trusted providers who handle data only on our instructions:

Hostinger: our web hosting, database, photo storage and email.
Google: “Continue with Google” sign-in, if you choose it.
Cloudflare Turnstile: the quick bot check on forms.
Meta (WhatsApp): to receive your verification message.
postcodes.io: to turn a postcode into an area name. We send only the postcode.
Stripe: card payments, once paid features start.

Some of these providers handle data outside the UK, for example in the USA. When they do, they use the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.

We never sell your data. We share it with the police or other authorities only when the law requires it, or to protect someone from serious harm.

6. How long we keep it

Room photos: we delete them when the room post ends (after 7 days).
Your account and posts: while your account stays open. After you delete your account, we remove your personal data within 30 days.
Reports, bans and safety records: up to 2 years, so banned people can’t simply return.
Help requests: 2 years after they close.
Ticket and payment records: 6 years, because tax law asks us to.
Hashed network addresses: 90 days.

7. Your rights

Under UK data protection law, you can ask us to:

give you a copy of your data;
correct data that’s wrong;
delete your data;
stop or limit how we use it, or object to it;
send your data to you or another service in a common format.

You can also withdraw any consent you gave. Ask through the contact form or email privacy@londonabbai.com. We reply within one month, and we don’t charge.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

8. Keeping your data safe

We use encrypted connections, sign-in links instead of passwords, strict rules in our code that let each member reach only their own private data, and two-step sign-in for our team. If a breach puts your data at risk, we tell you and the ICO as the law requires.

9. Children

London Abbai is for adults. You must be 18 or over to join. If we learn that someone under 18 joined, we close the account.

10. Changes to this policy

When we change this policy in a way that matters, we tell members by email or on the site first.

2. What we collect

Account: your name, email, home city or university, your 18+ and terms ticks, and your newsletter choice.

WhatsApp number: when you verify it before your first post.

What you post: rooms, jobs, businesses, reviews, guides, questions and photos, plus the postcode area of a room or business (never the full address on the map).

Tickets: the buyer’s name and email, and each guest’s name.

Messages to our team: what you write in the contact form and help requests.

Safety data: a scrambled (hashed) form of your device’s network address, so we can stop spam and repeat sign-ups. We can’t turn it back into the address.

Payments (when they start): our payment provider, Stripe, handles card details. We never see or store your full card number.

3. Why we use it, and our legal reasons

To run your account and show your posts: to keep our contract with you.

To keep members safe: checks before posts go live, WhatsApp verification, spam limits and reports. We rely on our legitimate interest in a safe community.

To answer your messages: our contract with you, or our legitimate interest when you aren’t a member.

To send tickets, codes and updates about your posts: our contract with you.

Newsletter and daily summaries: only with your consent. You can switch them off in Settings at any time.

Records the law asks us to keep, such as payment records for tax: our legal duty.

4. What other members see

Your posts, with your first name.

Your WhatsApp link, only for signed-in members who tap “Contact” on your post and accept our safety terms. We never show your email.

Event organisers see the names on the tickets for their event, to check guests in. They don’t see emails.

Guide writers show their first name and home city.

5. Who helps us run the site

We use trusted providers who handle data only on our instructions:

Hostinger: our web hosting, database, photo storage and email.

Google: “Continue with Google” sign-in, if you choose it.

Cloudflare Turnstile: the quick bot check on forms.

Meta (WhatsApp): to receive your verification message.

postcodes.io: to turn a postcode into an area name. We send only the postcode.

Stripe: card payments, once paid features start.

We never sell your data. We share it with the police or other authorities only when the law requires it, or to protect someone from serious harm.

6. How long we keep it

Room photos: we delete them when the room post ends (after 7 days).

Your account and posts: while your account stays open. After you delete your account, we remove your personal data within 30 days.

Reports, bans and safety records: up to 2 years, so banned people can’t simply return.

Help requests: 2 years after they close.

Ticket and payment records: 6 years, because tax law asks us to.

Hashed network addresses: 90 days.

7. Your rights

Under UK data protection law, you can ask us to:

give you a copy of your data;

correct data that’s wrong;

delete your data;

stop or limit how we use it, or object to it;

send your data to you or another service in a common format.

You can also withdraw any consent you gave. Ask through the contact form or email privacy@londonabbai.com. We reply within one month, and we don’t charge.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.