Privacy Policy

1. Introduction

JLM Collective ("we", "us" or "our") operates an online platform for short-term stays, property listings, enquiries and related services.

This Privacy Policy explains how we collect, use, store and share personal information when you use our website, create an account, submit a listing, make an enquiry, upload photos, contact us, or otherwise interact with our service.

We aim to handle personal information in accordance with applicable privacy laws, including the UK GDPR, EU GDPR, Israeli privacy law and, where applicable, relevant US state privacy laws.

2. Information we collect

We collect information needed to operate a secure and functional letting agency service.

Identifiers and account information

This may include your name, email address, phone number, account details, authentication identifiers, and basic Google profile information if you choose to sign in using Google.

Listing and property information

If you submit a stay for listing, we may collect property details, location or neighbourhood information, descriptions, pricing, availability, amenities, photos, host details, representative details and information about your connection to the property.

Enquiry and communication information

This may include messages sent through JLM Collective, enquiry details, requested dates, guest numbers, support requests and communications sent by email, website form, WhatsApp or other contact methods.

Technical information

When you use the website, we may collect technical information such as IP address, browser type, device type, operating system, pages viewed, approximate location, date and time of access and website usage information.

Payment or transaction information

If booking, deposit or payment features are added, we may collect transaction references, payment status and related booking information. We do not store full card details unless this is clearly stated and handled through an authorised payment provider.

3. How we use your information

We use personal information to:

• operate and improve the JLM Collective platform;
• create and manage user accounts;
• allow users to submit, review and display property listings;
• allow guests to send enquiries or booking requests;
• allow hosts, owners, representatives or managing agents to respond to enquiries;
• send service emails, account messages and enquiry notifications;
• review listings before they go live;
• prevent fraud, misuse and unauthorised activity;
• maintain website security;
• respond to support requests;
• comply with legal, regulatory, accounting, tax or dispute-related obligations;
• improve the design, functionality and performance of our service;
• send marketing communications where permitted by law or where you have agreed to receive them.

4. Legal basis for using your information

Where UK or EU data protection law applies, we rely on one or more of the following lawful bases:

Contract

We use your information where necessary to provide JLM Collective and the services you request, such as creating an account, submitting a listing or sending an enquiry.

Legitimate interests

We use information where necessary for our legitimate business interests, including operating JLM Collective, improving our services, preventing fraud, reviewing listings, securing the website and communicating with users.

Consent

We rely on consent where required, for example for certain marketing communications, optional cookies or optional features.

Legal obligation

We may use or retain information where necessary to comply with legal, regulatory, accounting, tax or dispute-related obligations.

5. Who we share information with

We may share information with:

Other platform users

If you make an enquiry or booking request, relevant details may be shared with the relevant host, owner, representative or managing agent.

If you submit a listing, relevant listing information may be displayed publicly or shared with users who view or enquire about that stay.

Service providers

We use third-party providers to operate JLM Collective, including:

• Supabase for authentication, database and file storage;
• Vercel for website hosting and deployment;
• Resend for transactional and service emails;
• Google for Google sign-in, if you choose to use it.

We may also use other providers for payments, analytics, security, customer support or communications if those features are added.

Legal, safety and business purposes

We may share information where necessary to comply with law, respond to legal requests, enforce our terms, prevent fraud, protect users, resolve disputes, or deal with a business sale, transfer, restructuring or financing.

No sale of personal information

We do not sell personal information for monetary consideration.

6. International data transfers

JLM Collective may be used by people in different countries, including the United Kingdom, European Economic Area, Israel and the United States.

Some of our service providers may store or process data outside your country. Where required, we will use appropriate safeguards to protect personal information transferred internationally, such as contractual protections, recognised transfer mechanisms or service providers with appropriate data protection commitments.

7. Regional privacy information

United Kingdom and European Union

Where UK GDPR or EU GDPR applies, you may have rights to access, correct, delete, restrict or object to certain uses of your personal information, request data portability and withdraw consent where processing is based on consent.

You may also have the right to complain to the UK Information Commissioner's Office or your local EU supervisory authority.

Israel

Where Israeli privacy law applies, information provided to JLM Collective is provided for the purpose of using our services. You may have rights to inspect information held about you and request correction or deletion of inaccurate or outdated information, subject to applicable law.

United States

Depending on your state of residence and whether particular privacy laws apply to us, you may have rights to request access, correction or deletion of certain personal information, and to receive information about the categories of information we collect and share.

8. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

For example:

• account information is kept while your account remains active and for a reasonable period afterwards;
• listing information and photos are kept while the listing is active and for a reasonable period after removal;
• enquiry and communication records may be kept to manage enquiries, support requests, disputes and platform safety;
• payment, transaction, accounting or legal records may be kept where required or permitted by law.

We may delete or anonymise information when it is no longer needed.

9. Cookies and tracking

We use essential cookies and similar technologies to operate the website, keep users signed in, manage security and provide core platform functions.

We may use analytics, performance or marketing cookies where permitted by law or where you have provided consent.

Where required, we will provide a cookie banner or other consent tool. You can also control cookies through your browser settings.

10. Security

We implement reasonable technical and organisational measures to protect personal information, including secure hosting, HTTPS encryption, access controls and authentication safeguards.

However, no website or online service is completely secure. Users are responsible for keeping their login details safe and telling us if they believe their account has been accessed without permission.

11. Children's privacy

JLM Collective is not intended for individuals under 18.

Users who create accounts, submit listings, make enquiries or request bookings should be at least 18 years old.

We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we may delete it.

12. Marketing

We may send marketing communications where permitted by law or where you have agreed to receive them.

You can opt out of marketing emails at any time by using the unsubscribe link or contacting us.

We will still send important service messages where needed, such as account, enquiry, listing, security or legal notices.

13. Third-party links and services

Our website may link to third-party websites or services, including maps, messaging services, payment providers or external websites.

We are not responsible for the privacy practices of third parties. You should read their privacy policies before using their services.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on this page with a new "Last updated" date.

If we make significant changes, we may notify users by email or through the website.

15. Contact and exercise of rights

To exercise your privacy rights or contact us about this Privacy Policy, please use: