Privacy Policy

[Tenant Name], operated by [Registered Company], is the controller responsible for personal data collected through this website. This means we decide how and why that data is used.

This policy explains our processing under the General Data Protection Regulation and UK GDPR where either applies. Contact [Support Email] or [Privacy Contact Address] with privacy questions or requests.

We collect account and contact details, guest names, booking dates, accommodation choices, occupancy information, preferences, messages, support records, device information, IP address, cookie identifiers, and website activity.

We receive booking status, cancellation, refund, and payment-related information from suppliers and Stripe. We do not receive or store full card numbers or card security codes.

We process information needed to search availability, create and manage bookings, take payment, provide support, send service messages, prevent fraud, and handle cancellations or refunds. This processing is necessary to perform our contract with you or take steps at your request before entering that contract.

We may also process data to meet tax, accounting, legal, security, and fraud-prevention obligations. Where we rely on legitimate interests, we consider the effect on your rights. We send optional marketing only with your consent where consent is required, and you may withdraw it at any time.

We share the information needed to fulfil a booking with accommodation providers, inventory aggregators, and other suppliers involved in the reservation. This can include guest names, stay dates, occupancy, contact details, and special requests.

Stripe processes payments and may use payment, device, and fraud-prevention data under its own privacy terms. We may also use hosting, communications, analytics, customer-support, and security providers that process data under contractual safeguards.

The website may offer AI-assisted search, recommendations, support tools, or machine translations. Information you enter into these features may be sent to service providers so they can produce a response.

Do not enter payment card details, identification numbers, health information, or other sensitive data into free-text AI tools unless the feature clearly asks for it. AI-generated results and translations may contain errors. Important booking terms should be checked against the original booking details.

We use cookies and similar technologies to keep the website secure, remember language or currency choices, maintain sessions, understand performance, and support optional marketing where enabled.

Strictly necessary cookies are used because the website cannot operate securely without them. Other cookies are used according to your choices where consent is required. See our Cookie Policy for categories, durations, and controls.

We keep personal data only as long as needed for the purposes described in this policy. Booking, payment, invoice, cancellation, and refund records are normally retained for seven years to meet tax, accounting, and legal requirements.

Account, support, security, analytics, and marketing data may have shorter or different retention periods. We delete or anonymise data when it is no longer required, unless a legal claim, investigation, or mandatory retention duty requires us to keep it longer.

Accommodation providers, suppliers, payment processors, and technology providers may process personal data outside the European Economic Area or the United Kingdom.

Where data-protection law requires it, we use an approved transfer mechanism, such as an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement or Addendum, and appropriate security measures. Contact [Support Email] for information about the safeguards relevant to your data.

Depending on the law that applies, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, or transfer of eligible data. You may object to processing based on legitimate interests and withdraw consent at any time.

Some rights are limited where we must keep information for legal, tax, fraud-prevention, or contractual reasons. To make a request, contact [Support Email]. We may need to verify your identity before responding.

You may also complain to the data-protection supervisory authority in the country where you live or work, or where you believe an infringement occurred. We would appreciate the opportunity to address your concern first.

Bookings may be made only by people aged 18 or over. Adults may include children as guests, but should provide only the information required to complete the booking. The website is not directed at children making bookings for themselves.

For privacy questions, rights requests, or concerns, contact [Tenant Name] at [Support Email] or [Privacy Contact Address].