Welcome to our booking platform (the “Platform”, “we”, “us”, “our”). The Platform enables guests to make online bookings or reservations for holiday accommodation (the “Service”).

This Privacy Policy explains how we collect, use, store and share your personal data when you use the Service. We are committed to processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR (where applicable), and the Data Protection Act 2018.

We act as the **data controller** for the personal data you provide through the Service.

What personal data do we collect?

We may collect the following categories of personal data:

• Identity data: name, address, email address, phone number.
• Booking information: details of your stay, number of guests, preferences.
• Payment information: card details are processed securely by our third-party payment processor—we do not store full card details.
• Technical data: IP address, device type, browser type, cookies, and similar tracking technologies.
• Communication data: messages or inquiries you send to us.
• Bank details, if required for owner payments or refunds.

How we use your personal data

We process your personal data for the following purposes:

• To provide, manage, and improve the booking Service.
• To manage reservations, payments, and guest communications.
• To prevent fraud, maintain security, and ensure appropriate use of the Service.
• To comply with our legal obligations (e.g. tax, accounting, regulatory requests).
• To conduct analytics to improve the Service.

We may share your personal data with third-party service providers (such as payment processors, hosting providers, or IT support services) where necessary to operate the Service. All such providers are engaged under GDPR-compliant contracts.

Our legal bases for processing

We rely on one or more of the following lawful bases for processing your personal data:

• Contract: to provide the Service and manage your booking.
• Consent: for optional marketing communications or cookies not strictly necessary for site operation.
• Legitimate interests: to improve the Service, maintain security, or ensure efficient operation, provided your rights are not overridden.
• Legal obligation: to comply with relevant laws (e.g. tax or financial regulations).

Your GDPR rights

You have the following rights under the UK/EU GDPR:

• The right to access your personal data.
• The right to request correction of inaccurate data.
• The right to request deletion of your data (the “right to be forgotten”).
• The right to withdraw consent at any time (for processing based on consent).
• The right to data portability.
• The right to restrict processing.
• The right to object to processing based on legitimate interests or for direct marketing.

You may exercise these rights by contacting us using the details below. We will respond within one month as required by law.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including legal, accounting, or reporting obligations. Where data is no longer required, it will be securely deleted or anonymised.

Children’s privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data relating to children under 16.

Cookies

We use cookies and similar technologies to operate the website, enhance performance, and personalise content. Some cookies are essential, while others require your consent under GDPR.

You can manage or disable cookies via your browser settings. Please be aware that disabling certain cookies may affect website functionality.

For more information, see the cookie controls provided on our website.

Changes to this Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via the Platform. Continued use of the Service after changes have been made indicates your acceptance of the updated Policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please contact:
office@i-stay.co.uk