1. Who We Are

Data Controller: Mr and Mrs Property Ltd

Trading As: The Good Stay Co

Companies House No: 14755141

ICO Registration No: [ZB XXXXXX — to be added upon registration]

Registered Address: Unit 1 Derwent Business Centre, Clarke Street, Derby, England, DE1 2BU

Contact: contact@mrandmrsproperty.co.uk

If you have any questions about this policy or how we handle your data, please contact us at the above email address.

 

2. What Personal Data We Collect

Guests and Holiday Visitors

• Full name and contact details (email address, phone number)
• Booking details including dates, property, number of guests, and any special requests
• Payment information (processed securely via our payment provider — we do not store full card details)
• Communications between you and our team
• Reviews and feedback you submit
• Nationality or country of residence where required for booking or regulatory purposes
• IP address, device type, and browsing behaviour on our website (via cookies — see our Cookie Policy)

Corporate Clients

• Company name, registered address, and Companies House or equivalent registration number
• Contact details of the individual making the booking (name, job title, email, phone)
• Details of staff or guests being placed (name, check-in requirements)
• Invoice and billing details including VAT number
• Communications and account correspondence

Insurance Partners and Loss Adjusters

• Organisation name and contact details
• Name and contact details of the referring individual
• Policyholder name and placement requirements (passed to us solely for the purpose of arranging accommodation)
• Claim reference numbers where provided
• Billing and invoicing details

International Guests and Companies

If you are based outside the United Kingdom — including guests from the European Union, the United States, the Middle East, Asia, or elsewhere — we collect the same categories of data described above. Where required, we take appropriate steps to ensure that any international transfer of your personal data is carried out lawfully and in accordance with UK GDPR. This may include the use of Standard Contractual Clauses (SCCs) or reliance on adequacy decisions where applicable.

 

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To process and manage your booking or placement
• To communicate with you before, during, and after your stay
• To process payments and issue invoices
• To comply with our legal and regulatory obligations
• To manage our relationship with corporate clients and insurance partners
• To send service-related communications (e.g. check-in instructions, booking confirmations)
• To respond to enquiries submitted via our website contact forms
• To improve our website and services through anonymised analytics
• To send marketing communications where you have given consent or where we have a legitimate interest to do so (you may opt out at any time)

 

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: Processing is necessary to fulfil your booking or service agreement with us
• Legal obligation: Where we are required to process data to comply with applicable law
• Legitimate interests: Where we have a legitimate business interest that does not override your rights (e.g. improving our services, fraud prevention)
• Consent: Where you have actively opted in, for example to receive marketing emails

 

5. Who We Share Your Data With

We do not sell your personal data. We may share it with the following categories of third parties:

• Hospitable — our channel management platform, which processes booking and guest communication data
• Payment processors — to securely handle transactions (e.g. Stripe or equivalent)
• Insurance companies and loss adjusters — where a placement has been referred through them, solely to manage the accommodation arrangement
• IT and website service providers — who help us operate our website and systems
• Legal and professional advisers — where required
• Regulatory authorities — where we are legally required to disclose information

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

 

6. International Data Transfers

Some of our third-party service providers (including Hospitable) may process data outside the United Kingdom or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office or the European Commission
• Adequacy decisions where the destination country has been deemed to provide an adequate level of data protection

If you are based in the EEA and have concerns about how your data is transferred, please contact us.

 

7. How Long We Keep Your Data

• Booking and guest data: Retained for [X] years following the end of your stay for accounting, legal, and dispute resolution purposes
• Corporate account data: Retained for the duration of the business relationship and [X] years thereafter
• Insurance placement data: Retained for [X] years in line with insurance industry record-keeping requirements
• Contact form enquiries: Retained for [X] months if no booking results
• Marketing data: Until you unsubscribe or withdraw consent

Legal note: Confirm retention periods with your solicitor in line with HMRC requirements and insurance regulations.

 

8. Your Rights

Under UK GDPR (and EU GDPR where applicable), you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at contact@mrandmrsproperty.co.uk. We will respond within one calendar month. If you are based in the EEA, you also have the right to lodge a complaint with your local supervisory authority.

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

 

9. Marketing Communications

We may send you marketing emails if you have opted in or if you are an existing client and we are promoting similar services. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. We will never share your data with third parties for their own marketing purposes.

 

10. Cookies

Our website uses cookies. Please see our Cookie Policy for full details of what cookies we use, why we use them, and how you can manage your preferences.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website. Where changes are significant, we will notify you by email where we hold your contact details.

 

12. Contact Us

Mr and Mrs Property Ltd (trading as The Good Stay Co)

contact@mrandmrsproperty.co.uk

Unit 1 Derwent Business Centre, Clarke Street, Derby, England, DE1 2BU

Companies House No: 14755141