HOSP.CLUB Privacy Notice
Updated 29 October 2026 · HOSP.CLUB website and Android app
1. Who we are
LWFIBF LIMITED, trading as HOSP.CLUB, is responsible for the personal information it uses to operate HOSP. Company number: 16976404. Registered office: 320 Firecrest Court, Warrington, United Kingdom, WA1 1RG. For privacy questions or requests, contact admin@hosp.club.
2. Information we use
We use account and contact details; profile photos, skills, experience and availability; venue details; applications, bookings, attendance, recorded hours and reviews; messages and support correspondence; payment, funding and withdrawal records; bank details supplied for payment administration; referral activity and rewards; identity documents submitted for review; and technical information needed for security, sessions and notifications.
Workers and venues see the profile and booking information relevant to finding and organising work. Authorised HOSP staff can access records needed to operate the service, investigate issues and review documents. Identity documents and full bank details are restricted and are not ordinary public profile information. Confirmed-booking phone sharing follows the worker's sharing preference.
Table bookings, event tickets and guest communications
When you reserve a table, we use your name, contact details, party size, booking time, venue and booking reference to record and manage the reservation. Venue staff can see the information needed to manage your visit, including any optional notes you supply. Notes may include allergy or access information; share only what you want the venue to know and discuss allergies directly with venue staff before ordering.
For event reservations, we record your account, guest name, event, individual ticket reference, ticket status and check-in record. Authorised staff at the event venue can verify your ticket and mark it as redeemed. Keep your ticket QR code private: it is used to verify admission.
Booking confirmations are service messages. Venue offers and HOSP offers have separate optional marketing choices; booking does not require you to join either list. Marketing records include the relevant choice and subscription status. Promotional emails include an unsubscribe link. Text sending is not currently active, even where a future text preference is offered.
Guest booking and ticket information is retained according to the operational, dispute and deletion criteria in section 8. The worker identity-document cleanup period is not a retention promise for guest reservations or tickets. Requests about a venue's own records may also need to be addressed to that venue.
Partner demonstration workspaces use sample activity. If you are added as an agreed demo email recipient, branded demonstration notifications may be delivered to your real email address. Demo emails are labelled as demonstrations; demo payments are simulated.
3. Why we use information
We use information necessary to provide the services you request, including accounts, applications, bookings, communication and agreed payment administration. Where this is necessary to perform our agreement with you, our basis is performance of that contract.
We also use information for our legitimate interests in preventing misuse and fraud, checking account and document information, maintaining reliable records, resolving disputes and protecting the service. These interests must be balanced against your rights, including the interests of users aged 16 or 17. We use information to meet applicable accounting and other legal obligations where those obligations apply. Optional website analytics uses consent. Acknowledging this notice is not blanket consent to every use of information.
4. Identity review and age
The service is intended for people aged 16 and over. Individual work opportunities may have additional age, experience or legal requirements.
Workers may submit a passport or driving-licence image for manual review of apparent authenticity and age. Reviewers can see nationality information where the document contains it; not every accepted document establishes nationality. This review is not a government-database authentication or a guarantee of a completed statutory right-to-work check. Eligibility for particular work must be assessed separately.
New National Insurance number collection is paused. Do not submit an NI number by email or chat. Previously supplied NI information remains encrypted and restricted while its continued necessity and retention are reviewed. It is not used as proof of permission to work. You can ask us to review or delete information we no longer need.
5. Service providers and other recipients
We use GoDaddy for hosting and server backups; Google Firebase Cloud Messaging for Android notification delivery; Google Analytics for optional website analytics; Microsoft 365 for service email and correspondence; and payment and banking providers, including Stripe and Zempler, where relevant to your transactions. Google Play operates the app distribution platform. Providers may also process information for their own account, security, payment or legal purposes under their notices.
Venues and workers receive information needed for their relevant applications and bookings. Venues may be separately responsible for their own engagement and recordkeeping activities. We may disclose relevant records to professional advisers, authorities or other parties where required by law or necessary to establish or defend legal rights.
GoDaddy identifies the HOSP server and backup storage regions as Europe. This does not mean all processing remains in the UK or Europe: provider support, messaging, analytics and payment services may involve other countries. Applicable transfer arrangements depend on the provider and service. Contact admin@hosp.club for information about the recipients and safeguards relevant to your information.
6. Optional analytics
With your permission, Google Analytics measures navigation through non-admin website areas, including within the Android app. Our configured page-view events use general page categories with private record identifiers and query strings removed. Referral codes/source information may be included for attribution. Browser, connection and device information can also be processed. Our configured events do not include names, email addresses, message contents, ID documents, bank details or payment amounts.
You can accept or reject analytics and change your choice through the website's analytics controls. Native Firebase Analytics collection is disabled. HOSP is not currently serving advertising in the app.
7. Android permissions and notifications
When you enable notifications, HOSP associates an installation identifier and Firebase delivery token with your signed-in account; the stored delivery token is encrypted. Notifications use general alert text, with message contents available inside the signed-in service. You can turn notifications off in the app or Android settings. This does not delete your account or booking records.
You choose files for uploads using the phone's file picker or, where offered, its camera app. Selected files are sent when you submit the form. HOSP does not request contact-list, SMS, microphone or GPS permissions in the Android manifest. Information you type, such as a postcode, is still information you provide to us. Downloaded files are saved to the location you select. App-specific automatic Android backup is disabled; server backups are separate.
8. Retention and deletion
We retain account and operational records while needed to provide the service. After closure or a deletion request, we assess which records can be deleted and which remain necessary for outstanding bookings or payments, disputes, fraud prevention, accounting or other applicable obligations. Retention depends on the purpose, the relevant transaction or dispute, applicable requirements and whether a justified hold remains. We do not treat the word 'audit' as an automatic reason to keep everything indefinitely.
The current identity-payload cleanup rule schedules removal from the active database 12 calendar months after account closure, unless a relevant investigation was opened before that deadline and remains open. Limited submission and decision metadata may remain. We review whether particular information can be removed earlier when it is no longer needed or a valid request is received.
Backups are separate recovery copies and are not immediately rewritten when an active record changes. The hosting dashboard currently shows daily automatic server snapshots. We do not promise that every backup or independent provider copy disappears immediately after an account is closed. A deletion request must also consider relevant exports, correspondence and recovery copies.
9. Requesting account or data deletion
Use the account settings deletion option, or follow https://hosp.club/account-deletion. You may also email admin@hosp.club from your account email address. Tell us that you want your account and associated personal information deleted. Do not send your password or identity document merely to make this request.
Accounts with linked work or financial records can require manual review. We may need to verify your request, complete outstanding matters and explain any necessary retention exceptions. Closing access and erasing all records are distinct actions. Uninstalling the app does not delete an account.
10. Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information; object to processing based on legitimate interests; and withdraw consent where we rely on it. Contact admin@hosp.club. You can also complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/.
11. Changes
We will update this notice when our practices change and identify the updated date. Material changes will be brought to users' attention through an appropriate service channel.