Your data, and who's responsible for what

When you use HiJiffy, the guest data that flows through the platform belongs to your property, not to us. We only ever store and use it to deliver the service you have asked for. We never use it for our own purposes, and we never sell it.

The GDPR has formal names for this relationship:

• Your property is the data controller. You decide what guest data is collected and why.
• HiJiffy is the data processor. We handle that data only on your instructions.

You will see these two terms across this section, because they decide who is responsible for what.

What this means in practice

You stay in control of the decisions: which messages go out, on what basis, and what your guests are told in your privacy notice. Our job is to give you a secure, compliant platform that does exactly what you tell it to, and to handle the parts that are ours (security, hosting, honouring deletion requests, and so on).

Your Data Processing Agreement

Every HiJiffy contract includes a Data Processing Agreement (DPA) that puts this relationship in writing under Article 28 of the GDPR. It covers what we process, why, how we secure it, who else helps run the service, how international transfers are protected, and how we handle data requests and incidents.

Where to find everything