PRIVACY POLICY

ShortStayHost.co.uk

Last updated: 21 September 2026

ShortStayHost.co.uk is operated by Bevenden Street Limited (“ShortStayHost”, “we”, “us” or “our”).

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you.

1. Who we are

The data controller responsible for your personal information is:

Bevenden Street Limited
Trading as ShortStayHost.co.uk
Company number: 10897660
Registered office: 80 Nightingale Lane, London, E11 2EZ, United Kingdom
Email: [email protected]

2. Information we collect

Depending on how you contact us or make a booking, we may collect:

• Your name, email address, telephone number and home address
• Booking details, including stay dates, property, number of guests and special requests
• Names and relevant details of other guests included in the booking
• Payment and transaction information
• Copies or details of government-issued identification where identity verification is required
• Communications between you and ShortStayHost
• Information about enquiries, complaints, damage, incidents or breaches of our house rules
• Technical information, including your IP address, browser, device and use of our website
• Images recorded by external CCTV at properties where CCTV is in operation
• Marketing preferences and records of consent
• Information supplied through Airbnb, Booking.com, other booking platforms or by the person arranging a group or corporate booking

We do not intentionally collect more information than is reasonably necessary to manage your enquiry, booking or stay.

3. How we use your information

We may use your personal information to:

• Respond to enquiries and provide quotations
• Process and administer bookings
• Take and manage payments
• Provide check-in instructions and guest support
• Communicate with guests before, during and after a stay
• Confirm guest identity and help prevent fraud or unauthorised bookings
• Manage security deposits, damage claims, complaints and chargebacks
• Protect our properties, guests, neighbours and business
• Enforce our booking terms and house rules
• Coordinate housekeeping, maintenance and other services connected with a stay
• Comply with accounting, tax, legal, regulatory and insurance obligations
• Improve our properties, website and guest service
• Send marketing communications where we have your consent or are otherwise permitted by law

4. Our lawful bases

We process personal information under one or more of the following lawful bases:

Contract: Where processing is necessary to respond to a booking request, provide accommodation or fulfil our obligations under a booking contract.

Legal obligation: Where we must retain or disclose information to comply with tax, accounting, regulatory, court or other legal requirements.

Legitimate interests: Where processing is reasonably necessary to operate and protect our accommodation business. This may include preventing fraud, protecting properties, maintaining security, handling complaints, recovering unpaid amounts and improving our service. We consider the effect on your privacy before relying on legitimate interests.

Consent: Where you have expressly agreed to receive marketing communications or to another specific use of your information. You may withdraw your consent at any time.

5. Identification and guest verification

We may request government-issued photo identification, proof of address or other information reasonably required to verify the identity of the person making a booking.

This information is used to reduce fraud, protect our properties and guests, enforce our booking terms and respond to payment disputes or legal claims.

Identification documents collected directly by ShortStayHost are normally deleted within 30 days after check-out. We may retain relevant information for longer where reasonably necessary to investigate suspected fraud, damage, a chargeback, a legal claim or a serious breach of our terms.

If identification is processed through a booking platform or verification provider, that organisation may apply its own privacy and retention policies.

Failure to provide requested verification may result in a booking being refused or cancelled where verification is reasonably necessary.

6. Payments

Payments may be processed through third-party payment providers such as Stripe, PayPal or the payment service offered by the relevant booking platform.

ShortStayHost does not normally receive or store your complete payment-card details. Payment providers process those details under their own privacy policies and security arrangements.

We may retain transaction references, amounts, payment status and related correspondence for booking, accounting, dispute and fraud-prevention purposes.

7. Booking platforms and service providers

We may receive or share personal information through or with:

• Lodgify, which provides our website, booking and property-management systems
• Airbnb, Booking.com and other booking or distribution platforms
• Stripe, PayPal and other payment providers
• Email, communications and cloud-storage providers
• Guest-verification, fraud-prevention or security providers
• Housekeeping, linen, maintenance and property-service providers
• Accountants, insurers, professional advisers and legal representatives
• Website analytics, cookie and technical-service providers
• Police, courts, local authorities, regulators or other public bodies where disclosure is legally required or reasonably necessary

We only provide service providers with the information reasonably required to perform their role. They are expected to handle personal information securely and in accordance with applicable data-protection law.

Housekeeping and maintenance teams are not routinely given copies of guest identification or payment information.

8. Corporate and group bookings

Where a company, contractor, travel organiser or another guest makes a booking on your behalf, we may receive your name, contact details and information relevant to the stay from that person or organisation.

The person making the booking is responsible for ensuring that guests are aware that their information has been provided to us and can access this Privacy Policy.

9. CCTV and property security

External CCTV may operate at some properties or building entrances for security, crime prevention, protection of property and investigation of serious incidents. There are no cameras inside guest accommodation.

Where CCTV is used, appropriate signage will be displayed. Footage is normally retained for no longer than 30 days, unless it is required for the investigation of an incident, insurance matter, legal claim or request from law enforcement.

CCTV footage is only accessed when reasonably necessary and is not used for general monitoring of guests inside their accommodation.

10. Cookies and website information

Our website and its service providers may use cookies and similar technologies to:

• Operate the booking and availability functions
• Remember preferences
• Maintain website security
• Understand website performance and usage
• Measure advertising or marketing effectiveness, where consent is required and provided

Essential cookies may be used because they are necessary for the website and booking service to operate. Non-essential analytics or marketing cookies should only be used in accordance with the choices made through the website’s cookie controls.

You can manage available cookie choices through the cookie banner and through your browser settings. Blocking essential cookies may affect the operation of the website or booking system.

11. Marketing communications

We may send news, offers or other marketing communications where:

• You have expressly consented to receive them; or
• We are permitted to contact an existing customer about similar services under applicable electronic-marketing rules.

Marketing communications will provide a way to unsubscribe. You may also opt out at any time by emailing [email protected].

We will not sell your personal information to third parties for their marketing purposes.

12. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, insurance and dispute-resolution requirements.

Our usual retention periods are:

• Guest identification documents: deleted within 30 days after check-out, unless required for an active investigation, dispute or legal claim
• Unsuccessful general enquiries: normally retained for up to 12 months
• Booking, payment and accounting records: normally retained for up to six years after the relevant financial year or transaction
• Guest communications and incident records: retained for the period reasonably necessary to administer the booking and resolve complaints, claims or disputes
• CCTV footage: normally retained for no longer than 30 days, unless required in connection with an incident
• Marketing records: retained until consent is withdrawn, you unsubscribe or the information is no longer required, although we may keep a minimal suppression record to ensure that you are not contacted again

Information may be retained for longer where required by law or where reasonably necessary in connection with legal proceedings, fraud prevention, insurance or the establishment, exercise or defence of legal claims.

13. International transfers

Some service providers, booking platforms or technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we rely on appropriate legal safeguards, such as UK adequacy regulations, approved contractual protections or another lawful transfer mechanism. Further information about applicable safeguards can be requested by contacting us.

14. Data security

We use reasonable organisational and technical measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to people and service providers who reasonably require it for their role. However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

15. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• Request access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to erase your personal information
• Ask us to restrict how your information is used
• Object to certain processing based on legitimate interests
• Object to direct marketing at any time
• Request transfer of information you have provided to us in an appropriate electronic format
• Withdraw consent where processing is based on consent

You have an absolute right to object to the use of your personal information for direct marketing.

Some rights are subject to legal exceptions. For example, we may need to retain booking or transaction records to meet legal and accounting obligations or to deal with a legal claim.

To exercise your rights, please email [email protected]. We may need to verify your identity before responding.

16. Automated decision-making

We do not currently make decisions about guests based solely on automated processing where those decisions would have a legal or similarly significant effect.

Booking platforms, payment providers or fraud-prevention services may use automated systems under their own policies.

17. Children’s information

Bookings must be made by an adult. We may receive limited information about children included in a family or group booking where it is necessary to prepare or manage the accommodation.

We do not knowingly collect children’s information for marketing purposes.

18. Complaints

Please contact us first if you have a concern about how we use your personal information:

Email: [email protected]

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk

19. Changes to this Privacy Policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on our website with the date of the most recent update.