Clear from the outset

Privacy notice.

This notice covers this public prelaunch website, our hotel research, business correspondence and room-photo submissions.

Last updated 30 September 2026 · Version 1

Who is responsible

Dan Cornell, trading as Windowroam in the United Kingdom, is the controller of the personal information described here. Contact privacy@windowroam.com for privacy questions or requests, or partners@windowroam.com about a hotel submission.

What we collect and where it comes from

• Business contacts: name, business email, role, hotel, country, official website, the public source and date checked, and notes relevant to a possible listing. These may come from you, a colleague’s introduction or your hotel’s official public contact and room pages.
• Correspondence: messages, replies, delivery outcomes, contact preferences and the information you choose to send.
• Submissions and permissions: room-category details, booking links, photographs, necessary file metadata, credits, copyright authority and the name, role and approval of the authorised contact.
• Technical data: the hosting and email providers process information such as IP addresses, request times, device/browser information and mail-routing or security data to deliver and protect their services.

Please do not send guest information, payment details or images containing identifiable guests. We seek only the information needed to assess the room view and permission to show it.

Why we use it

• Research and relevant business introductions: our legitimate interest in finding suitable hotel rooms and building a reliable room-view directory, after considering the contact’s reasonable expectations and privacy. This is not blanket permission to send marketing: where applicable electronic-marketing rules require consent, we obtain it before contact.
• Responding to a request and arranging a listing: steps requested before an agreement or performance of an agreement where you are a party; otherwise our legitimate interest in managing the hotel relationship.
• Recording image rights, checking accuracy and resolving issues: our legitimate interests in publishing authorised, accurate information and establishing or defending legal claims.
• Security and opt-outs: our legitimate interests in protecting the service and ensuring that people who object are not contacted again; legal obligation where applicable.
• Optional uses needing consent: only for the stated purpose after a separate choice. Replying to us or supplying a photo does not subscribe you to a general mailing list.

Your choice about contact

You can object to direct marketing at any time by replying “no thanks” or emailing either address above. We stop marketing contact and retain the minimum suppression record needed to respect that choice. We do not sell contact information.

Who handles information

Dan Cornell and any specifically authorised support providers handle information only as needed for these purposes. Cloudflare delivers and protects the public website; Google Workspace provides business email. Relevant approved technical providers may store the restricted records needed to manage submissions and permissions. We may disclose information where legally required or necessary to establish or defend a legal claim.

Providers may process information outside the United Kingdom. Applicable safeguards depend on the provider and service, including adequacy decisions or contractual transfer mechanisms. Contact us for details of the arrangements relevant to your information. Before adding a provider or changing a transfer, we assess the necessary safeguards.

AI assistance and human review

We may use AI to help research public hotel information, draft correspondence and organise work. Invitations, listing facts and permissions are reviewed before use. We do not make decisions with legal or similarly significant effects solely by automated processing. We do not upload personal hotel-contact data or private correspondence to an unapproved AI service.

How long we keep information

• Prospect research: up to six months after the last substantive review or contact, then delete it or record a justified continuing need.
• Enquiries that do not become listings: up to 12 months after the last substantive exchange, unless an unresolved matter requires longer.
• Listing and licence evidence: for the relationship or licence period and up to six years afterwards where needed for rights or legal claims. We minimise personal details and restrict access; this does not extend permission to display a photograph.
• Opt-outs: a minimal suppression record while outreach continues, reviewed annually.
• Technical logs and backups: according to the service provider’s applicable retention settings and our documented deletion schedules. We do not restore withdrawn images to public use.

A legal requirement or active dispute may justify keeping a specific record longer. We assess that separately.

Cookies and this website

This public website has no optional analytics, advertising pixels, embedded social media, visitor accounts or submission database. We do not set optional tracking cookies. Hosting providers may process requests and use strictly necessary security measures. Email links open your own email application, whose privacy settings are separate. Our private development prototype is not part of this public website.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information; object to processing based on legitimate interests; and withdraw consent where we rely on it. Withdrawal does not affect earlier lawful processing. Some rights have legal exceptions. We may ask for proportionate information to confirm your identity.

You can complain to the UK Information Commissioner’s Office, or your local data protection authority where applicable. Please contact us if you would like us to address a concern first; that is not a condition of making a complaint.

Changes

We update this notice when the service or our handling of information changes. Material new uses will be explained before they begin. The date and version above identify this notice.