Data Processing Addendum

This Data Processing Addendum describes data-processing terms for guest, reservation, property, user, and operational data processed by Hotel Flow Central on behalf of customers.

The customer is generally the controller or business for guest and property data entered into the PMS. Hotel Flow Central is generally the processor or service provider for that data, and acts only on documented customer instructions unless legally required otherwise.

Processing subject matter includes hotel PMS hosting, reservation management, guest profiles, housekeeping, reporting, support, security, backups, integrations, and related services. Data subjects may include guests, bookers, staff, administrators, travel agents, company contacts, and support contacts. Personal data may include contact details, stay details, preferences, communications, folio information, consent records, and operational notes.

Hotel Flow Central will apply confidentiality obligations, access controls, encryption in transit, administrative controls, logging, backup processes, vendor review, and incident response processes appropriate to the service. Customers remain responsible for their own user permissions, lawful basis, notices, data accuracy, and instructions.

Subprocessors may be used for hosting, email, support, analytics where enabled, scheduling, AI providers, monitoring, and infrastructure. Subprocessor details, transfer safeguards, audit support, incident notices, data subject request support, return/deletion, and government-request procedures are handled through Hotel Flow Central privacy and security processes and the applicable customer agreement.

Privacy contact: info@hotelflowcentral.com.