Legal

Privacy Policy

BoomHaus Studio Limited  ·  Last updated: April 2026

This Privacy Policy explains how BoomHaus Studio Limited ("BoomHaus", "we", "us", or "our") collects, uses, and protects information about you when you visit our website at boomhaus.design or contact us about our services.

We are committed to handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Information We Collect

Information you provide to us

When you fill in a form on our website, request a brochure, or contact us directly, we may collect:

• Your name and contact details (email address, phone number)
• Your property details (address, type, number of bedrooms)
• Your Airbnb or short-let listing URL (for the Superhost Audit)
• Your enquiry details and any messages you send us
• Your company name and role (for hospitality and BTR enquiries)

Information collected automatically

When you visit our website, we automatically collect certain technical information including:

• Your IP address and general location
• Browser type and version
• Pages visited and time spent on the site
• How you arrived at our site (e.g. from a search engine or social media)

This information is collected using Google Analytics 4. See Section 4 for more detail on cookies.

2. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide our services
• Produce your Superhost Audit report
• Send you information about our services where you have requested it
• Improve our website and understand how visitors use it
• Comply with our legal obligations

Our lawful basis for processing your personal data is:

• Contract performance, where processing is necessary to deliver a service you have requested
• Legitimate interests, for website analytics and improving our services
• Consent, where you have explicitly agreed to receive marketing communications

3. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• HubSpot, our CRM platform, used to manage enquiries and follow-ups
• Google, via Google Analytics 4, for website analytics
• Resend, our transactional email provider, used to deliver reports and confirmations
• Stripe, our payment processor, for handling furniture pack orders

All third-party providers are required to process your data in accordance with applicable data protection law and our instructions.

4. Cookies

Our website uses the following cookies:

Essential cookies

These are required for the website to function and cannot be disabled. They do not collect personal data or track your browsing activity.

• bh_cookie_ack, records that you have acknowledged our cookie notice. Expires after 1 year.

Analytics cookies (Google Analytics 4)

These cookies help us understand how visitors use our site. They collect anonymised data about page views, session duration, and traffic sources. No personally identifiable information is collected.

• _ga, distinguishes unique users. Expires after 2 years.
• _ga_[ID], maintains session state. Expires after 2 years.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

CRM cookies (HubSpot)

If you submit a form on our site, HubSpot may set cookies to track your activity and associate it with your contact record. You can learn more in HubSpot's Privacy Policy.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is retained for up to 3 years. You can request deletion at any time.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability
• Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, contact us at hello@boomhaus.design. We will respond within 30 days.

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and hosted on Google Firebase.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website following any changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: