Last updated: Sep 18, 2026
1. Controller
The data controller is:
2. Data we process
Depending on how you use Kitezilla, we may process:
- account data: name, email address, login credentials in protected form, account status and verification information;
- profile and listing data: organisation, role, contact details, descriptions, locations, links, photographs and other material you submit;
- communications: messages, support requests, corrections, content reports and related correspondence;
- verification data: information used to verify that you are authorised to claim or manage a listing;
- technical and security data: IP address, device and browser information, timestamps, logs, security events and cookie identifiers;
- usage and preference data: pages viewed, consent choices and interactions, where the relevant feature is enabled;
- commercial interaction data: clicks on advertising, booking or affiliate links and identifiers used by CJ, Stay22 or their partners;
- public-source information: professional or business contact information obtained from official websites, public registers, public business profiles or other publicly available sources for directory purposes.
Do not submit sensitive personal information unless it is necessary and we specifically ask for it.
3. Purposes and legal bases
We process data for the following purposes:
| Purpose | Typical legal basis |
|---|---|
| Create and operate user accounts; provide listing-management tools | Performance of a contract or steps requested before entering one |
| Review submissions, verify representatives and publish or maintain listings | Performance of a contract and/or legitimate interests in operating an accurate directory |
| Respond to enquiries, corrections and privacy requests | Legitimate interests and/or compliance with legal obligations |
| Detect abuse, secure accounts, keep essential logs and defend legal claims | Legitimate interests and, where applicable, legal obligations |
| Send requested service messages | Performance of a contract or legitimate interests |
| Send optional marketing communications | Consent, where required |
| Store or access non-essential cookies and run personalised advertising or affiliate tracking | Consent, where required by applicable law |
| Measure service performance using privacy-compatible methods | Consent where required; otherwise legitimate interests where permitted |
| Comply with law, investigate reports and restrict illegal content | Legal obligation and/or legitimate interests |
Where we rely on legitimate interests, we consider the necessity of the processing and its effect on your rights. You may object as described below.
4. Where data comes from
We receive data directly from you, from an organisation you represent, automatically from your device, from service providers, and from public sources used to prepare directory listings. If a listing contains professional contact information and you want it corrected or removed, contact .
5. Sharing and recipients
We may share data only as reasonably necessary with:
- hosting, database, email, security and technical service providers;
- authentication, customer-support and form providers;
- analytics and consent-management providers, if enabled;
- advertising and affiliate partners, including CJ and Stay22, where their services are used;
- professional advisers, authorities or courts where necessary to comply with law or protect rights;
- a successor operator in connection with a genuine sale, transfer or reorganisation of the service, subject to appropriate safeguards.
Third-party booking, advertising and affiliate services may act as separate controllers for their own processing. Their policies apply when you interact with them. Links to current provider privacy information should be included in the live Cookie Policy or consent panel.
We do not sell personal data in the ordinary meaning of exchanging it directly for money. Some privacy laws may define certain advertising or tracking disclosures more broadly; where applicable, we provide the required choices.
6. International transfers
Some service providers or partners may process data outside the European Economic Area. Where required, we use an applicable transfer mechanism, such as an adequacy decision or approved standard contractual clauses, together with supplementary safeguards where appropriate.
7. Retention
We keep personal data only for as long as needed for the relevant purpose, including: Published business information may remain in an updated directory entry after a particular user account is deleted where there is a separate lawful basis for retaining it.
8. Cookies and similar technologies
Kitezilla uses strictly necessary technologies for functions such as login, security and consent preferences. Optional analytics, advertising, affiliate or embedded-content technologies will be used only according to the choices offered in the consent interface where consent is required.
9. Your rights
Subject to applicable law, you may have the right to:
- access your personal data;
- correct inaccurate data;
- request deletion;
- restrict processing;
- receive certain data in a portable format;
- object to processing based on legitimate interests;
- withdraw consent at any time, without affecting earlier lawful processing;
- lodge a complaint with a competent data-protection authority.
## 10. Account choices
You can update certain account and listing details through your account. To close an account, use or contact us. Closing an account may not automatically remove content submitted on behalf of a business, archived records required for security or law, or information retained on another lawful basis.
11. Children
Kitezilla is not intended for children to create accounts or submit listings independently. Accounts are available only to persons aged at least 16, or older where local law requires. If you believe a child has provided personal data contrary to this policy, contact us.
12. Security
We use reasonable organisational and technical safeguards designed to protect personal data. No online system can be guaranteed completely secure. Users are responsible for keeping their credentials confidential and notifying us of suspected unauthorised access.
13. Changes
We may update this policy when the service, providers or legal requirements change. The current version and update date will be published on this page. We will provide additional notice where a material change requires it.