Privacy Policy

This Privacy Policy describes how 852 Rooms (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use our website and related services at 852rooms.com (the “Services”). By using the Services, you acknowledge this policy. If you do not agree, please do not use the Services.

We operate a Hong Kong-focused flatshare marketplace. We are not a law firm; this page is written to be clear for everyday users. For legal advice about your specific situation, consult a qualified professional.

1. Who we are & contact

The data controller for the Services is the operator of 852 Rooms. For privacy questions or requests, email support@852rooms.com.

2. Data we collect

Depending on how you use the Services, we may process:

• Account & authentication: email address, password hash (we do not store your plain-text password), display name, profile details you choose to provide (for example first name, last name, gender where collected, date of birth if you provide it), and session tokens. Social sign-in (for example Google or Facebook) is handled through our authentication provider; we receive profile identifiers and basic profile fields they share with us according to your consent with that provider.
• Listings & content: text, photos, pricing, availability, location fields, and other information you submit when posting or editing a listing or room-wanted profile.
• Messaging: messages you send or receive through in-app chat, timestamps, and related metadata needed to deliver conversations and safety features (for example reports).
• Usage & technical data: IP address, device and browser type, general log data, cookies or similar technologies (see Cookies below), and diagnostics to keep the site secure and reliable.
• Payments (if enabled): if you purchase a paid feature, our payment processor (for example Stripe) receives payment information directly; we typically receive limited billing metadata (such as subscription status, plan, and receipt references), not your full card number.

3. How we use your data

We use personal data to:

• Create and secure your account, sign you in, and recover access;
• Show listings, profiles, and search results you expect on a marketplace;
• Operate messaging between users and send service-related emails (for example password resets, confirmations, important notices);
• Detect, prevent, and respond to fraud, abuse, spam, and security incidents;
• Improve performance and reliability of the Services (including analytics in aggregated or pseudonymous form where possible);
• Comply with legal obligations and enforce our Terms.

4. Legal bases (summary)

Where applicable law requires a “legal basis”, we rely on: performing our contract with you (providing the Services); legitimate interests (security, product improvement, and moderate marketing compatible with your settings); consent where we ask for it (for example certain cookies or optional communications); and legal compliance.

5. Sharing & processors

We use trusted service providers (“processors”) to host infrastructure, authentication, email, payments, and operational tooling. They may process personal data only on our instructions and for the purposes described here. We do not sell your personal data in the traditional sense of selling lists of individuals to advertisers.

We may disclose information if required by law, court order, or lawful request, or to protect the rights, safety, and integrity of users, the public, or the Services.

6. International transfers

Our providers may process data in jurisdictions outside Hong Kong. Where required, we use appropriate safeguards (such as contractual clauses offered by providers) and limit sharing to what is needed to run the Services.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, and dispute-resolution needs. When you delete your account or ask us to erase data, we delete or anonymise it subject to limited exceptions (for example where we must retain minimal records to prevent fraud or meet legal obligations). See also our Data deletion page.

8. Cookies & similar technologies

We use cookies and similar storage to keep you signed in, remember preferences (such as language or theme), measure basic usage, and protect against abuse. You can control cookies through your browser settings; blocking strictly necessary cookies may affect sign-in or core features.

9. Your rights

Depending on applicable law (including the Hong Kong Personal Data (Privacy) Ordinance where it applies), you may have rights to request access, correction, deletion, restriction, or objection in certain cases, and to lodge a complaint with a regulator. To exercise rights, contact us at the email above. We may need to verify your identity before fulfilling a request.

10. Children

The Services are not directed at children under 13 (or the minimum age required in your jurisdiction). If you believe we have collected data from a child without appropriate consent, contact us and we will take appropriate steps.

11. Changes

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Material changes may be communicated by email or a notice on the Services where appropriate.

Related: Terms of Service · Data deletion