1. Who we are
Last updated: 19 October 2026
Bedroom to Booked collects and uses your personal data only to send you what you ask for and, with your consent, our emails. This policy covers our Instagram accounts and automations, our partners' campaigns run on our behalf, our emails and our website.
Bedroom to Booked is a trading name of Elmhaus Ltd, the business responsible for your data (the "data controller"). You can reach us at:
- Legal business name: Elmhaus Ltd
- Mailing address: 300 W 20th St, New York, NY, 10011
- Email: Jac@bedroomtobooked.com
- Website: Bedroomtobooked.com
In this policy, "we", "us" and "our" mean Bedroom to Booked. "You" means anyone who comments on, messages or follows our content, gives us their email, or visits our website.
2. What we collect and how
We collect only what you give us directly, plus basic data from the platforms you use to reach us.
- Instagram profile details (username, display name, profile ID and profile photo), when you comment on or message our account, or a partner's post running our campaign, through Instagram and ManyChat.
- Your comments and direct messages, when you comment a keyword or reply to our messages.
- Your email address, when you type it in a direct message or a form on our website.
- A record of your consent, including the date, time, the wording you saw, and the post or account it came from. This is saved automatically when you give your email.
- Email activity (opens, clicks and unsubscribes), from our email platform when you receive our emails.
- Website data (IP address, device, browser and cookies), when you visit our website.
- Purchase details, when you buy from us. Card details are handled by our payment provider and we never see or store them.
Cookies. Our website uses cookies to work properly and to understand how it is used. Where the law requires it, we ask for your consent before using non-essential cookies, such as analytics or advertising cookies. You can also block or delete cookies in your browser settings.
We do not ask for sensitive data such as health, religion or financial account details.
Some of our Instagram messages are written by an AI assistant inside ManyChat. It is only set up to ask for your email and send you the resource you asked for. It does not make decisions about you that have legal or similar effects.
3. Why we use your data
Each use has a legal basis. These are the bases required under the GDPR and UK GDPR, and they reflect how we treat everyone's data.
- To send you the free guide or resource you asked for. Legal basis: your request (performance of a contract).
- To send you emails with tips and offers from Bedroom to Booked. Legal basis: your consent, given when you share your email.
- To reply to your messages and help with questions. Legal basis: our legitimate interest in answering you, or your request.
- To keep records of your consent and unsubscribe requests. Legal basis: legal obligation.
- To see which posts and partners bring in sign-ups, using totals rather than individual profiling. Legal basis: our legitimate interest in improving our content.
- To protect our accounts, prevent misuse and handle legal claims. Legal basis: legal obligation and our legitimate interest in security.
We only use your data for these purposes. If we ever want to use it for something new, we will tell you first and ask for consent where required.
4. Our emails and how to unsubscribe
We only send what we told you about when you signed up: tips and offers from Bedroom to Booked.
- Unsubscribe anytime. Every email has an unsubscribe link, or you can email jac@bedroomtobooked.com. We act on requests promptly and always within 10 business days.
- Clear sender. Every email names Bedroom to Booked and includes our mailing address.
- No list selling. We never sell, rent or trade your email address.
- After you unsubscribe we keep only your email address on a do-not-contact list, so we never email you again by mistake.
- Withdrawing consent stops future emails. It does not affect emails we lawfully sent before.
5. Partner and creator campaigns
We work with creators who share our free resources with their followers. When you comment on one of their posts, an automation may message you from the creator's account to collect your email for Bedroom to Booked.
- That message names Bedroom to Booked as the business that will email you.
- Creators collect your email only on our behalf, under a written agreement with us.
- Creators may not keep or use your email for their own purposes unless their message also named them and you agreed.
- If a creator collects data for themselves, their own privacy policy covers that.
Paid partnerships are labelled on Instagram, for example with "Paid partnership" or #ad.
6. Who we share data with
We share your data only with the service providers that help us run Bedroom to Booked, and only as much as they need.
- ManyChat, Inc. (USA) runs our Instagram message automations and stores the conversation and your email.
- Meta Platforms (Instagram) hosts our account, comments and messages. Meta's own privacy policy also applies to your use of Instagram.
- Kit stores our email list and sends our emails.
- Ionos (USA) runs and measures our website.
- Whop (USA) processes payments.
These providers may only use your data to provide their service to us. We may also disclose data if the law requires it, to protect our rights, or to a buyer if our business is sold. The buyer would be bound by this policy.
We do not sell your personal information or share it for cross-context behavioural advertising.
International transfers. Some providers are based in the United States. When data leaves the EU, EEA or UK, we rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on Standard Contractual Clauses.
7. How long we keep it and how we protect it
We keep data only as long as we need it.
- Your email address and email activity: until you unsubscribe. If you don't open any email for 6 months, we delete you or ask you again.
- Our do-not-contact list (email address only): as long as needed to make sure we don't email you again.
- Consent records: while we email you, plus 3 years, so we can show you agreed.
- Instagram conversations in ManyChat: 12 months after your last message.
- Purchase records: as long as tax and accounting law requires, typically 6–7 years.
We protect your data by using reputable providers, encrypting data in transit, limiting access to people who need it, and using two-factor authentication on our accounts. If a breach puts your rights at risk, we will notify the relevant authority within 72 hours where required, and tell you without undue delay.
8. Your rights
Wherever you live, you can ask us to show, correct or delete your data, and you can unsubscribe at any time. Email jac@bedroomtobooked.com and we will reply within 30 days, or sooner where the law requires. We may ask you to confirm your identity first. We will never treat you differently for using your rights.
Depending on where you live, you also have these rights:
- EU and EEA (GDPR): access, correction, deletion, restriction, portability, objecting to processing (including an absolute right to object to direct marketing), and withdrawing consent. You can complain to your local data protection authority.
- United Kingdom (UK GDPR and PECR): the same rights as under the GDPR. You can complain to the Information Commissioner's Office (ico.org.uk).
- Canada (PIPEDA and CASL): access, correction, and withdrawing consent. You can complain to the Office of the Privacy Commissioner of Canada, and report spam to the Spam Reporting Centre.
- United States (California and other state privacy laws, where they apply): knowing what we collect, deletion, correction, opting out of sale or sharing, and using an authorised agent. You can complain to your state attorney general or privacy agency.
- Australia (Privacy Act and Spam Act): access and correction. You can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
We would appreciate the chance to fix any concern first, so please contact us before complaining to an authority.
9. Children, changes and contact
Children. Our content and emails are not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us their email, contact us and we will delete it.
Changes. If we change this policy, we will update the date at the top. If a change is significant, we will tell subscribers by email before it takes effect.
Contact. Elmhaus Ltd, trading as Bedroom to Booked, 300 W 20th St, New York, NY, 10011, Jac@bedroomtobooked.com.