Acceptable use policy
Last updated: 27 August 2026 · Governs use of the GuestlinePortal Service and API surfaces · Applies to all Customers on the island of Ireland
· I ·Purpose
This Acceptable Use Policy (the "AUP") supplements the Terms of Service and defines the ways in which the GuestlinePortal Service, API and Client Portal may and may not be used. Violation of this AUP is a material breach and may lead to suspension or termination of the affected subscription without refund. GuestlinePortal reserves the right to update the AUP with 30 days' notice published to /changelog.
· II ·Permitted use
The Service may be used only for the legitimate operation of a hospitality business on the island of Ireland — hotels, guesthouses, hostels, self-catering, serviced apartments and hotel groups that operate one or more properties with Guestline Rezlynx PMS as their central reservation system. Every module is licensed on the basis that the Customer will operate the property in accordance with all applicable Irish and European law, including but not limited to the Consumer Protection Act 2007, the Sale of Goods and Supply of Services Act 1980, the Data Protection Act 2018, the Revenue Commissioners VAT rules under the Value Added Tax Consolidation Act 2010, and the Fáilte Ireland grading and inspection regime.
· III ·Prohibited uses
The Customer must not use the Service to:
- Publish rates or availability which the Customer does not intend to honour, or run bait-and-switch OTA campaigns designed to mislead consumers.
- Generate invoices which misstate the applicable Irish VAT rate or which are addressed to a party not connected to the underlying stay for the purpose of evading tax.
- Bypass the PSD2 Strong Customer Authentication or 3-D Secure 2.2 flows required for card payments on the Bank of Ireland and AIB rails.
- Attempt to circumvent Fáilte Ireland grading rules — for example rendering a 4-star badge on a property graded 3-star, or Welcome Standard where none has been awarded.
- Reverse engineer, decompile or attempt to extract the source code of any module or of the Client Portal.
- Use the Service in a manner that overloads or degrades the Rezlynx API — for example polling more frequently than the rate limits stated in the API contract.
- Send unsolicited marketing communications to guests without the consent required under the Data Protection Act 2018 and the ePrivacy Regulations (SI 336/2011).
- Process any special category of personal data under Article 9 GDPR through the Service without a separate written agreement.
- Store payment card data outside the tokenisation flow provided by Bank of Ireland or AIB — the Service must not be used as a substitute for a PCI DSS Level 1 environment.
· IV ·Security expectations
Every Client Portal user must (a) protect their sign-in credentials, (b) enable multi-factor authentication where offered, (c) sign out from shared devices, (d) report any suspected credential compromise to security@guestlineportal.com within 24 hours of detection. Rezlynx API tokens must not be shared outside the Customer's organisation and must be rotated at least every 12 months.
· V ·Cooperation with Irish authorities
GuestlinePortal cooperates with lawful requests from Irish authorities — An Garda Síochána, the Revenue Commissioners, the Data Protection Commission, the Competition and Consumer Protection Commission, Fáilte Ireland and the courts of Ireland. Where a lawful request affects Customer data we notify the Customer without delay unless prohibited by law. Requests from authorities outside Ireland are evaluated for lawfulness under Irish and EU law before any data is disclosed.
· VI ·Enforcement
Suspected violations are investigated by the Dublin desk within one working day. Depending on severity the Customer may be issued (a) a warning with a 14-day cure period, (b) an immediate suspension pending investigation, or (c) an immediate termination with no refund of any amount paid. Suspension and termination decisions can be appealed in writing to the Data Protection Officer within seven days of the decision.
· VII ·Contact
AUP-related correspondence: support@guestlineportal.com, phone +353 1 447 55 20, or in writing to GuestlinePortal Ltd, 21 Grafton Street, Dublin D02 XH54, Ireland.