Hotel Manager Matrix

Privacy Policy

Last updated: 13 September 2026

Introduction

Hotel Manager Matrix is an application for hotel managers: daily checks, briefings, a register of issues, the manager on duty and reports. This policy explains what data we collect, why, and what rights you have over it. The data controller is Hotel Consult Ltd, Company No. 204073745, Sofia 1415, Bulgaria.

Data we collect

First and last name; email address (used to sign in and to receive task notifications); phone, if you choose to give one; country — it sets the language of the application and of the letters; position and department in the hotel, from which the rights follow. At payment: the invoice details (company, tax number, address) you enter on the payment page.

The legal grounds

Your account and everything the service does with it — performance of the contract (Art. 6(1)(b) GDPR). The invoice details — a legal obligation (Art. 6(1)(c)). The security log and the checks that the application is up — our legitimate interest in a service that works and is not abused (Art. 6(1)(f)). We send no marketing without your consent (Art. 6(1)(a)). For the content of the hotel the ground is the hotel's to choose — it is the controller, as the next sections explain.

What we do not collect

Hotel guest data. Card details — they never pass through us. Location. Advertising or tracking identifiers. Screen recordings.

The content you enter

The checks, the day's numbers, the issues in the register, the duty rota and the reports belong to the hotel. For these, Hotel Consult acts as a processor on the manager's instruction. Who marked what is visible to the team — that is the point of a shared register. The full terms of that role are set out in the Data Processing Agreement, which is part of the Terms of Service.

Third parties

Where the data lives

In the European Union. The database and files are in Frankfurt; encrypted in transit and at rest. Each hotel sees only its own data — the rule is kept in the database itself, not on the screen.

Security

Passwords are stored hashed (bcrypt) — neither we nor the manager can see your password. Minimum length: 10 characters. Sign-in with Google is available: Google confirms who you are and learns that you signed in to the Matrix; we receive your name and email address, nothing more. Actions that affect people and money — assigning a task, changing rights, a report sent, a payment — are written to a log that customers cannot access.

How long it is kept and how it is erased

For as long as the hotel is in use. The owner can delete the hotel at any time: the application stops immediately, and the data is erased on a date that depends on the paid period — at most 30 days later. Until then the deletion can be undone with one click; after it there is no recovery. The erasure removes all data, the files, and the accounts of people who belong only to that hotel.

One exception required by law: invoices are kept for ten years (Bulgarian Accountancy Act). They stay with our payment provider.

Cookies

We use no advertising or tracking cookies. The browser keeps only your sign-in, so you do not enter your password each time.

Your rights

Access, rectification, erasure ("the right to be forgotten"), restriction and objection. A full archive of the hotel can be downloaded at any time from Settings. For anything else write to matrix@hotelconsult.bg — we answer within 30 days.

Complaints

If you believe we have handled your data wrongly, write to us first — that is the fastest way to fix it. You also have the right to complain to the supervisory authority: the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg — or to the authority in your own EU country.

Changes

When this changes, the date above changes with it. Material changes are also announced by email.

Contact

Hotel Consult Ltd · Sofia 1415, Bulgaria · matrix@hotelconsult.bg