Privacy Policy

Who we are

Stayfair Connect is the trading name of Delaney's Hotels Limited, a company registered in England and Wales under company number 13617420, with a registered office at 64 Arnold Road, Dagenham, England, RM9 6AN. We're the data controller for the personal data described in this policy. You can contact us about anything in this policy at hello@stayfairconnect.co.uk.

What we collect

If you're booking a stay, we collect your name, email, phone number and booking dates. We also ask which country you're travelling from — this is entirely optional and only used in aggregate, to help owners and us understand where guests are coming from; it's never required to complete a booking. If you're an owner, we collect your contact details and information about your property. Payment details for Bookable-tier bookings are handled directly by Stripe Connect — we never see or store your full card number. The only payment information we keep is a reference (card brand, last four digits, and expiry), so you can recognise a saved card later. If you ask for a Stayfair Perks pass for a stay you'll book with its owner directly, we collect your name, email and any dates you give us.

Why we collect it, and our legal basis for doing so

We collect your booking and contact details because we need them to process your booking or, if you're an owner, to build and run your listing — this is processing necessary for the performance of a contract with you. We use booking and payment information to pay properties their share of Bookable-tier bookings, and to meet our own tax and accounting obligations, under our legal obligation and legitimate interest in running the platform properly. If you opt in to hear about new stays joining an area you care about, that's processed on the basis of your consent, which you can withdraw at any time.

Who we share it with

Stripe Connect, to process payment and pay properties their share. The property you're booking, so they know who's arriving and when. The owner of a stay you ask for a Stayfair Perks pass for, with your agreement, so they know you came through us. If you share a bring-a-friend link and a friend books through it, that stay's owner is told your first name so they can thank you, and we email you that a friend booked (never who). Our hosting and infrastructure providers, to run the site itself. We don't sell your data to advertisers.

Where your data is processed

Some of the providers we use to run Stayfair Connect — including Stripe and our hosting infrastructure — may process data outside the UK, including in the United States. Where that happens, it's covered by a recognised safeguard, such as the UK's international data transfer addendum to the EU Standard Contractual Clauses or an equivalent mechanism required under UK GDPR.

How long we keep it

We keep your account details for as long as your account is active. Once a booking is complete, we keep the underlying transaction record for around six years, in line with standard UK bookkeeping requirements — this is a minimal record for accounting and tax purposes, not your full personal profile. If you ask us to delete your account, see "Your rights" below for what that actually removes.

Your rights

Under UK GDPR, you can ask to see what we hold about you, correct it, or ask us to delete it — email hello@stayfairconnect.co.uk to make any of these requests. A deletion request is reviewed rather than actioned instantly — deleting your account removes your personal profile — name, saved card reference, marketing preferences — but we may keep a minimal, anonymised booking record where we're legally required to for tax purposes. UK businesses are generally expected to keep transaction records for around six years, so we keep those records for as long as the law requires.

If you're unhappy with how we've handled your data, you can also complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk. We'd appreciate the chance to put things right directly first, but you're not required to come to us before contacting the ICO.

Cookies

We use a small number of strictly necessary cookies — one each to keep you signed in as a guest, an owner, or an admin, and one used briefly during two-factor sign-in for admin accounts. These are exempt from cookie consent requirements because the site can't function without them: without a session cookie, you'd be signed out on every page. We don't use any analytics, advertising, or tracking cookies. If that changes, we'll update this section and ask for your consent first, as required.

To see which pages people visit, we use Vercel Web Analytics, which counts page views without cookies and without storing anything on your device. It records the page, the page you came from, your country and your type of device and browser, never your name or anything you type. Visits aren't linked together from one day to the next, and we leave out pages for signed-in owners, as well as claim codes and booking references.