Privacy policy

MoJO Housing (the "service", "we", "us") is a student accommodation search and booking directory operating at mojohousing.com. This policy explains what personal data we collect from students and prospective students using the service, how we use it, how long we keep it, and the rights you have under UK / EU GDPR and other applicable data-protection laws.

For any privacy question or request, write to privacy@mojohousing.com. We aim to reply within one business day and complete GDPR requests within 30 days.

We collect the following categories of personal data:

• Enquiry form data: full name, email, phone number (optional unless you ask us to reply by phone or WhatsApp), preferred reply method, marketing opt-in status, nationality (optional), destination city, university, move-in date, length of stay, budget, preferred room type, and any free-text message you write. You provide this voluntarily when you submit an enquiry.
• Guarantor details (only if you or the accommodation provider adds them to your file): guarantor name, relationship, phone, email, and any notes.
• Technical data: your IP address, browser user agent, the page you enquired from, the page you first landed on, the site that referred you, and any UTM / advertising campaign identifiers (utm_source, utm_medium, gclid, etc.) attached to your visit.
• Cookie data: the identifiers stored by the cookies you have consented to (see "Cookies" below).

We do not collect passport numbers, visa numbers, bank account details, or credit card numbers. Any booking payment you make happens directly with the accommodation provider, not with us.

We process personal data on the following lawful bases under UK GDPR:

• Contract / pre-contract: to respond to your enquiry and connect you with the accommodation provider you are interested in. Without this we cannot handle your enquiry.
• Legitimate interests: to prevent fraud and abuse (rate limiting, anti-bot checks), to measure basic site performance, and to keep our service secure and available.
• Consent: for any non-essential cookies and for any marketing communications. Marketing consent is optional, separate from the accommodation enquiry, and you can withdraw it at any time.
• Legal obligation: to keep records where required by accounting, tax, or consumer-protection law.

When you enquire about a specific property, we share your enquiry details with the operator of that property (for example the PBSA brand or their onboarding team) where needed to answer your request. We point this out beside the enquiry form before you submit.

We also use the following categories of third-party processors:

• Hostinger: hosting, database, and email transport for our site. Data stored in the EU.
• Cloudflare (Turnstile): anti-bot checks on the enquiry form.
• Resend: transactional email delivery (enquiry confirmations, admin alerts).
• Google Analytics / Google Ads (only if you have consented to analytics cookies): anonymised traffic and campaign attribution.
• Google Maps: to render the map on property pages.

We do not sell your personal data to advertisers, list brokers, or any third party.

• Enquiries: kept for up to 24 months after your last interaction with us, then permanently deleted.
• Guarantor records: kept for the duration of the tenancy the accommodation provider signs, then deleted.
• Technical logs (IP, user agent, admin login history): 90 days.
• Cookies: retention set by each cookie; see our cookie consent panel to review and adjust.

You can ask us to delete your data earlier, subject to any legal retention obligations, see "Your rights" below.

Under UK / EU GDPR, you have the right to: access the data we hold about you; ask for it to be corrected; ask for it to be deleted (right to be forgotten); restrict or object to certain processing; receive a copy in a portable format; and withdraw any consent you have given.

To exercise any of these rights, email privacy@mojohousing.com from the address you used to enquire. We may ask a follow-up question or two to verify your identity, and we will action verified requests within 30 days.

You also have the right to complain to a data-protection authority. In the UK that is the Information Commissioner's Office (ICO): ico.org.uk.

We use a small number of cookies. Strictly-necessary cookies (session, CSRF, cookie-consent choices) are always set. Analytics and advertising cookies are only set after you tap "Accept all" on our cookie banner. You can revoke consent at any time by clearing your site data in your browser.

We protect your data with encrypted connections (HTTPS + HSTS), server-side password hashing (bcrypt), two-factor authentication for admin access, rate limiting on public endpoints, and standard defence-in-depth headers on every page. All data is stored on servers within the European Union.

MoJO Housing is intended for students aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe we hold data about a person under 16, please contact us and we will delete it.

We will update the "Last updated" date at the top of this page whenever this policy changes. Material changes will additionally be surfaced on the enquiry form the next time you use it.