How your ID is handled

This notice explains what happens when you upload your ID through Keyd for a stay with a hotel or short-let operator ("your host").

Who is responsible

Your host is the data controller. They decide why your ID is collected and how long it is kept, and their name appears on the upload page. Keyd provides the service to your host, stores your ID on its own servers in the UK, and processes it only on your host's instructions, as their data processor.

What is collected and why

Photos of the ID you and the guests on your booking choose to upload, and a record of when they were uploaded and viewed. Your host uses them only to confirm the identity of the people staying, for security and fraud prevention, and where the law requires it. In the UK, the Immigration (Hotel Records) Order 1972 requires hosts to record the nationality and passport details of guests aged 16 or over who are not British or Irish citizens.

How it is protected

• Photos are cleaned of hidden data such as location, then encrypted as soon as they arrive.
• Only your host's staff can view them, using two-step sign-in. Each view is recorded and the image is marked with the viewer's name.
• Nothing is sold, shared with advertisers, or used to train software.

How long it is kept

Your host sets a retention period, shown on the upload page. When it ends, the photos are permanently deleted automatically. A record that the upload and deletion happened is kept without the images.

Your rights

You can ask your host for a copy of your data, to correct it, or to delete it early, unless they must keep it by law. Contact them using the details on your booking or the upload page. If you are unhappy with how your data is handled, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.