Privacy Policy

Last updated: 24 October 2026

1. Who we are

invenCue ("we", "us") provides property management software for independent hotels and small hotel groups. The website at invencue.com is operated by Ian Gunter. For the purposes of UK data protection law, we are the data controller for the personal data described in this policy. You can contact us about any privacy matter using the contact form.

2. What this policy covers

This policy covers personal data collected through this public website and when you sign up for and pay for an invenCue account: the enquiry form, registration and billing, the live demo and the technical data your browser shares when you visit. It does not cover data that hotels enter into invenCue about their own guests and staff. Where a hotel uses invenCue to run its business, that hotel decides what data is collected and why, and is responsible for it. This includes the booking, reminder and invoice emails that invenCue sends to a hotel's guests on that hotel's behalf: the hotel is responsible for those, and invenCue only sends them for the hotel.

3. The data we collect

Enquiry form

If you send an enquiry we collect your name, email address, hotel or group name (optional) and the message you write. We use this to reply to you and to discuss whether invenCue suits your hotel.

Registering for an account

When you register we collect your name, email address, password (stored only in hashed form), your hotel's name and your chosen web address (for example yourhotel.invencue.com), and the plan you choose. We use this to create and run your account, to contact you about it and to bill you.

Emails we send you

If you have an account we email you about it: a welcome message, a reminder before your free trial ends, receipts, and notices if a payment fails. Staff members can also choose to receive an email when a task or maintenance ticket is assigned to them, and can turn that off at any time on the Notifications page. These emails are part of providing the service, not marketing.

Payment and billing

Payments are processed by SumUp. You enter your card details directly into SumUp's secure payment form: we never see or store your full card number. SumUp gives us a token that lets us charge your card for your subscription, and we store that token, the card type and the last four digits, together with your billing history (dates, plan, amounts and payment status).

Live demo

The live demo uses shared test accounts and needs no registration. Please do not enter real personal data about yourself or anyone else into the demo. Demo data may be viewed by other demo users and may be reset or removed at any time.

Technical data

Our servers record standard request information such as your IP address, browser type, pages requested and the time. We use your IP address, in hashed form, to limit how often the enquiry form can be submitted, which helps prevent spam and abuse.

Spam and abuse protection

Our public forms (enquiries, registration, sign-in and password reset) are protected by Google reCAPTCHA v3. It analyses how you interact with the page, along with technical information such as your IP address, to tell people from bots, and shares that information with Google.

4. Why we use your data, and our legal basis

• Providing your account and taking payment. Performing our contract with you (and steps taken before entering into it, such as your free trial).
• Replying to your enquiry. Legitimate interests (responding to people who contact us) and, where relevant, steps taken at your request before entering into a contract.
• Security and preventing abuse. Legitimate interests (keeping the website secure and the enquiry form free of spam).
• Running the demo and the website. Legitimate interests (providing and maintaining the service you have asked to see).
• Meeting legal obligations. Where the law requires it, for example keeping accounting records.

We do not use your data for automated decision-making or profiling, and we do not sell personal data.

5. Cookies

We use cookies needed to make the site work: a session cookie and a security (CSRF) token that protect forms and keep you signed in. Each customer account is on its own web address, and its session cookie works only there. Google reCAPTCHA may also set or read cookies and similar technologies to detect abuse; these are used for security and are not used by us for advertising. We do not use advertising or analytics cookies. If that changes, we will update this policy and ask for consent where the law requires it.

6. Third-party services

To load the website's design and scripts, your browser fetches files from content delivery networks, including cdn.jsdelivr.net, code.jquery.com and cdn.datatables.net. Those providers receive your IP address and browser details as part of serving the files, and handle them under their own privacy policies. Enquiries are delivered to us by email through our email provider.

We use these other service providers, each under their own privacy policies: SumUp (payments), and Google (reCAPTCHA spam protection).

7. How long we keep data

We keep enquiries for as long as needed to deal with them and for a reasonable period afterwards, and then delete them. Rate-limiting data is kept for up to an hour. Server logs are kept for a short period for security and troubleshooting. Account and billing records are kept while your account is active and afterwards for as long as the law requires us to keep accounting records (usually six years).

8. Sharing your data

We share personal data only with service providers who help us run the website and handle email, under appropriate terms, and where required by law or to protect our rights. We do not transfer your data outside the UK unless appropriate safeguards are in place.

9. Your rights

Under UK data protection law you have the right to access your personal data, have it corrected or erased, restrict or object to its use, and receive a copy of data you provided in a portable format. To exercise a right, contact us using the contact form. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

10. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls. No online service is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.