Privacy Policy
Last updated: March 2026
1. Who We Are
GetFlatPal (“we”, “us”, “our”) is an online platform that connects people looking for rooms with people who have rooms to list, operating primarily in the Czech Republic. We are the data controller for personal data processed through this website.
If you have any questions about this policy or our data practices, please contact us at hello@getflatpal.com.
2. Data We Collect
We collect the following categories of personal data:
- Account information: Your name and email address when you register an account.
- Profile information: Age, occupation, bio, and a profile photo if you choose to provide them.
- Listing content: Room details, address, photos, and pricing information you submit when listing a property.
- Messages: Communications sent between users through our messaging system.
- Usage data: Pages visited, search queries, and interactions with listings — collected automatically.
- Technical data: IP address, browser type, device type, and operating system.
We do not collect sensitive personal data such as racial or ethnic origin, health information, or financial account details.
3. How We Use Your Data
We process your personal data for the following purposes and legal bases under the GDPR:
Providing the service
Performance of a contractCreating and managing your account, displaying listings, and enabling messages between users.
Improving the platform
Legitimate interestsAnalysing usage patterns to improve functionality, fix bugs, and develop new features.
Safety and security
Legitimate interestsDetecting and preventing fraud, spam, and abuse of the platform.
Legal compliance
Legal obligationMeeting our obligations under Czech and EU law, including retaining records as required.
Marketing communications
ConsentSending you updates or promotional messages if you have opted in. You may withdraw consent at any time.
4. Cookies
We use cookies and similar technologies to operate and improve GetFlatPal. Cookies are small text files stored on your device.
| Type | Purpose | Required |
|---|---|---|
| Essential | Authentication session, security tokens | Yes |
| Functional | Remembering preferences and settings | No |
| Analytics | Understanding how users navigate the site | No |
You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using core features of the platform.
5. Sharing Your Data
We do not sell your personal data. We share data only in the following circumstances:
- With other users, to the extent necessary for the platform to function — for example, your name and listing details are visible to other users browsing the site.
- With our service providers, including Supabase (database and authentication infrastructure), who process data on our behalf under data processing agreements.
- With law enforcement or regulatory authorities, where required by applicable Czech or EU law.
- In connection with a merger, acquisition, or sale of assets, in which case users will be notified.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:
- Account and profile data is kept for the lifetime of your account and deleted within 30 days of account closure.
- Listing data is retained for 12 months after a listing expires, then permanently deleted.
- Messages are retained for 24 months to allow dispute resolution.
- Usage and technical data is anonymised or deleted after 13 months.
7. Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (EU 2016/679) and applicable Czech law, you have the following rights:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data (“right to be forgotten”).
Right to restriction
Ask us to limit how we process your data in certain circumstances.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent
Withdraw consent at any time where processing is consent-based.
Right to lodge a complaint
Complain to the Czech Office for Personal Data Protection (ÚOOÚ).
To exercise any of these rights, email us at hello@getflatpal.com. We will respond within 30 days.
8. International Transfers
Your data is stored and processed within the European Economic Area (EEA). Where any third-party service providers process data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
9. Children's Privacy
GetFlatPal is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where changes are material, notify you by email or by a prominent notice on the platform.
Continued use of GetFlatPal after changes are published constitutes your acceptance of the updated policy.
11. Contact
For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please reach out: