Privacy Policy

1. Who we are

This Privacy Policy explains how StaysIn collects and uses personal data when you use our website, submit enquiries, list a property, book a stay or experience, or use our owner and client dashboard services.

Data controller: Select Letting Solution LTD (trading as StaysIn), Edinburgh, United Kingdom.

Contact: info@staysin.co.uk

2. What data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data, such as name, email address, phone number, and company name.
• Account data, such as login email, encrypted credentials handled by our authentication provider, and role type.
• Property and listing data, such as property address, listing details, pricing inputs, photos, and notes you submit.
• Enquiry data, such as message content, requested dates, form type, and source page metadata.
• Support data, such as support tickets, message history, and status updates.
• Technical data, such as IP address, device and browser details, referral source, and interaction events.
• Marketing and consent data, such as cookie preferences, consent state, and attribution signals.

3. How we collect data

• Directly from you through forms, account actions, enquiries, bookings, and messages.
• Automatically through cookies and tracking technologies, subject to your consent settings.
• From connected service providers used to operate bookings, experiences, analytics, communications, and payments.

4. Why we use your data

• To provide and manage bookings, listings, enquiries, support, and account services.
• To communicate service updates, confirmations, support responses, and essential operational notices.
• To improve website performance, content quality, product decisions, and conversion journeys.
• To run and measure marketing campaigns where you have granted the required consent.
• To detect abuse, prevent fraud, protect platform security, and comply with legal obligations.

5. Legal bases under UK GDPR

We process personal data using one or more of these legal bases:

• Performance of a contract.
• Legitimate interests, including service improvement, fraud prevention, and operational management.
• Legal obligation, including accounting, tax, and compliance duties.
• Consent, including optional analytics and advertising technologies.

6. Cookies, tracking, and Consent Mode

We use a consent banner and consent preferences panel. Essential cookies are always active. Optional categories are only activated after consent.

Our website may use tools such as:

• Google Tag Manager (GTM).
• Google Analytics 4 (GA4).
• Meta Pixel.

Where configured, Google Consent Mode signals are used to align tag behavior with your selected preferences. You can update your choices at any time via cookie settings.

7. Sharing your data

We share data only when required to operate services or comply with law, including with:

• Cloud hosting and infrastructure providers.
• Booking and property management platforms, such as Lodgify.
• Experience and supplier integrations, such as Bókun.
• Analytics and advertising partners, subject to consent where required.
• Email and communication providers used for service emails and notifications.
• Professional advisers, regulators, or authorities where required by law.

8. International transfers

Some service providers process data outside the UK. Where this happens, we use appropriate safeguards, including contractual protections and equivalent lawful transfer mechanisms.

9. Data retention

We retain personal data only for as long as needed for service delivery, legal, accounting, and compliance obligations, dispute resolution, and security records. Retention periods vary by data type and legal duty.

10. Security

We apply technical and organisational measures to protect personal data, including access controls, secure storage practices, and monitoring. No system is fully risk free, but we continuously improve our safeguards.

11. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where processing is consent-based.

To exercise your rights, contact: info@staysin.co.uk

If you are in the UK, you can also raise concerns with the Information Commissioner's Office (ICO).

12. Children

Our services are not directed to children under 18 and we do not knowingly collect personal data from children.

13. Updates to this policy

We may update this Privacy Policy from time to time. Material changes will be published on this page with an updated revision date.

14. Contact

For privacy requests or questions, contact us at info@staysin.co.uk.