Data Security
Effective date: September 15, 2026 · Last updated: September 15, 2026
This page describes the safeguards Host The Bay uses to protect the personal information of property owners, guests, and website visitors. It supplements our Privacy Policy, which explains what we collect and why.
1. Website security
hostthebay.com is served over encrypted HTTPS connections. We keep our website platform, plugins, and hosting environment up to date, and administrative access is limited to authorized Host The Bay team members using unique credentials.
2. Payment & financial data
Host The Bay does not store credit card numbers or bank account details on our own systems. Guest payments, and owner payouts, are handled through the booking platforms (such as Airbnb and VRBO) and payment processors we work with, each of which is responsible for maintaining its own PCI‑DSS‑compliant handling of card data.
3. Property access security
Where properties use smart locks or keypad entry, access codes are unique to each reservation, shared only with the confirmed guest and with cleaning or maintenance personnel who need entry, and deactivated at checkout.
4. Identity verification
Where identity verification is required, it is generally handled through the booking platform’s own verification systems rather than stored by us. Any identifying documents we do handle directly — for example during property owner onboarding — are stored securely and access is limited to team members who need them.
5. Employee & contractor access
Access to owner, guest, and property information is granted only to team members and vetted cleaning or maintenance contractors who need it to do their jobs, and only to the extent necessary. Team members and contractors are expected to keep this information confidential.
6. Data minimization & retention
We collect only the information needed to provide our services and communicate with owners and guests, and we retain it only as long as needed for business purposes or to meet legal and licensing recordkeeping requirements. Information that is no longer needed is securely deleted or de‑identified.
7. Incident response
If we become aware of a security incident affecting personal information, we investigate promptly and take steps to contain it, and we notify affected individuals and any regulators as required by applicable law.
8. Safeguards for licensed activities
Host The Bay and/or its principals hold licenses through the California Department of Real Estate (DRE #01973401), the Nationwide Multistate Licensing System (NMLS #1307558), and the California Department of Insurance (DOI #0K32217), and refer clients to our affiliate Preferred Financial Group, Inc. (“PFG”) for real estate, mortgage, and insurance services. Because we originate mortgage loans, we maintain safeguards consistent with the GLBA Safeguards Rule, including a written information security program, periodic risk assessments, access controls, encryption of sensitive data, employee training, oversight of service providers (including PFG), and a documented incident‑response plan. For insurance‑related transactions under our DOI license, we maintain comparable administrative, technical, and physical safeguards. Information shared with PFG as part of a referral is shared only for that purpose and remains subject to PFG’s own safeguards as a separate licensed entity.
9. Reporting a concern
If you believe you’ve found a security vulnerability affecting hostthebay.com or our systems, or have any other security concern, please let us know:
Host The Bay
925‑208‑2850 · team@hostthebay.com