Privacy policy

MoJO Housing (the "service", "we", "us") is a student accommodation search and booking directory operating at mojohousing.com. This policy explains what personal data we collect from students and prospective students using the service, how we use it, how long we keep it, and the rights you have under UK / EU GDPR and other applicable data-protection laws.

For any privacy question or request, write to hello@mojohousing.com. Our team handles requests and replies within the time limits that apply to the request.

We collect the following categories of personal data:

• Enquiry form data: full name, email, phone number, preferred reply method, marketing opt-in status, nationality (optional), destination city, university, move-in date, length of stay, budget, preferred room type, and any free-text message you write. You provide this voluntarily when you submit an enquiry.
• Booking contact details: when you start a booking request, we collect an emergency contact's name, relationship and phone number so we can reach them if we cannot reach you during the booking process.
• Guarantor details (only if you or the accommodation add them to your file): guarantor name, relationship, phone, email, and any notes.
• Account information: if you create an account, your email, profile details and saved accommodation choices. Email sign-in uses a one-time code. If you use Google sign-in, we receive the account information needed to sign you in, rather than your Google password.
• Shortlist interactions: when we send you a personalised shortlist, we record its property-link clicks and email-image loads to help our team follow up. Email services can load images automatically, so an image load is not proof that you read an email.
• Technical data: your IP address, browser user agent, the page you enquired from, the page you first landed on, the site that referred you, and any UTM / advertising campaign identifiers (utm_source, utm_medium, gclid, etc.) attached to your visit.
• Cookie data: the identifiers stored by the cookies you have consented to (see "Cookies" below).

We do not collect passport numbers, visa numbers, bank account details, or credit card numbers. Any booking payment you make happens directly with the accommodation, not with us.

We process personal data on the following lawful bases under UK GDPR:

• Contract / pre-contract: to respond to your enquiry and connect you with the accommodation you are interested in. Without this we cannot handle your enquiry.
• Legitimate interests: to prevent fraud and abuse (rate limiting, anti-bot checks), to measure basic site performance, and to keep our service secure and available.
• Consent: for any non-essential cookies and for any marketing communications. Marketing consent is optional, separate from the accommodation enquiry, and you can withdraw it at any time.
• Legal obligation: to keep records where required by accounting, tax, or consumer-protection law.

Our team uses your enquiry to suggest rooms and help with your booking request. Where needed, we share relevant details with the company that runs the accommodation you are interested in, for example its booking or onboarding team. We point this out beside the enquiry form before you submit.

We also use the following categories of third-party processors:

• Hostinger: website hosting and database services.
• Zoho Bigin: our customer relationship management service, used to handle contact details, enquiry requirements, correspondence and booking progress. See Zoho's privacy policy.
• Cloudflare: media delivery and Turnstile anti-bot checks on enquiry forms. Turnstile processes technical signals such as IP address and browser information to distinguish people from bots. See the Turnstile privacy policy.
• Resend: transactional email delivery (enquiry confirmations, admin alerts).
• Google Analytics: optional usage and successful-enquiry measurement after you accept analytics cookies. We exclude private account, admin and shared-shortlist pages from this measurement and omit URL query strings from public pageviews. Advertising tags, if configured, also depend on your cookie choice.
• Map services: Google Maps on property pages and OpenStreetMap tiles on city maps. Loading an interactive map sends technical information, including your IP address, to its provider.

We do not sell your personal data to advertisers, list brokers, or any third party.

Our hosting, email, CRM, security and map providers operate in more than one country. Processing locations depend on the provider and the service configuration; we do not promise that all data stays in the European Union. You can contact us for information about the services used to handle your enquiry.

Retention depends on the record and its purpose: handling an active enquiry or booking, following up on your request, keeping required accounting records, resolving a dispute, or investigating abuse. We do not currently run an automatic deletion timer for enquiry or guarantor records. Our team handles deletion requests and reviews records that are no longer needed, subject to any obligation to retain them.

Service-provider logs and backups may have different retention cycles. Cookies have their own expiry periods. You can change your optional cookie choice below and ask us about retention or deletion of your enquiry using the contact details in "Your rights".

Under UK / EU GDPR, you have the right to: access the data we hold about you; ask for it to be corrected; ask for it to be deleted (right to be forgotten); restrict or object to certain processing; receive a copy in a portable format; and withdraw any consent you have given.

To exercise any of these rights, email hello@mojohousing.com from the address you used to enquire. We may ask a follow-up question or two to verify your identity, and we will respond within the time limits applicable to your request.

You also have the right to complain to a data-protection authority. In the UK that is the Information Commissioner's Office (ICO): ico.org.uk.

We use a small number of cookies. Strictly-necessary cookies (session, CSRF, cookie-consent choices) are always set. Analytics and advertising cookies are only set after you tap "Accept all" on our cookie banner or the controls below. Choose "Essentials only" to stop further analytics collection in this browser. To remove cookies already stored, clear this website's site data in your browser settings.

We protect your data with encrypted connections (HTTPS + HSTS), server-side password hashing, two-factor authentication for admin access, enquiry rate limits and bot checks. Access to CRM and finance records requires an authorised account. These measures reduce risk; no online service can guarantee that every security incident will be prevented.

MoJO Housing is intended for students aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe we hold data about a person under 16, please contact us and we will delete it.

We will update the "Last updated" date at the top of this page whenever this policy changes. Material changes will additionally be surfaced on the enquiry form the next time you use it.