Get 10% off your first booking with coupon WINTER10
WINTER10 Register Now
Flexiestays Help Centre
Contact us
Policy

Privacy policy

What personal data Flexiestays collects, how we use and store it, who we share it with, and your rights under UK and EU GDPR.

Last updated 3 December 2025

At Flexiestays, accessible at www.flexiestays.com, we are committed to protecting the privacy and personal data of our visitors, guests and partners. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the rights you have under applicable data protection law, including the UK GDPR, EU GDPR and the Data Protection Act 2018.

If you have any questions or concerns, contact us at info@flexiestays.com.

1. Consent

By using our website or services, or by making a booking, you consent to this Privacy Policy and agree to the collection and use of information as described below.

2. Information we collect

We collect different types of personal information depending on how you interact with us.

Information you provide directly

  • Name, email address, phone number and billing address.
  • Booking details, including dates, the property reserved and guest information.
  • Communication data such as emails, messages or feedback you send us.

Payment information

  • Payments are securely processed through Stripe, our payment processor. We do not store card details on our servers. Stripe may collect and process your card details in accordance with its own privacy policy.

Automatically collected information

  • Log files, including IP address, browser type, ISP, date and time of visit, referring and exit pages, and clicks.
  • Device information, including operating system and device type.
  • Usage data about how you navigate and interact with our site.

Cookies and similar technologies

  • We use cookies to remember preferences, analyse website traffic and improve functionality.
  • Cookies may also be used for marketing, including Google Analytics, Facebook Pixel and other tracking tools.

3. How we use your information

We use the data we collect to:

  • Provide, operate and manage our website and booking platform.
  • Process and confirm reservations.
  • Communicate with you about customer service, booking updates and support.
  • Send marketing or promotional emails, only if you have opted in.
  • Detect and prevent fraud or unauthorised activity.
  • Comply with legal obligations, including tax and accounting requirements.
  • Improve your experience by personalising our website and services.

4. Legal basis for processing (UK and EU GDPR)

We process your personal data under the following legal grounds:

  • Contractual necessity: to process bookings and deliver the services you have requested.
  • Consent: where you have explicitly agreed to marketing communications or cookie tracking.
  • Legitimate interests: to improve services, analyse usage and ensure site security.
  • Legal obligation: to comply with accounting, tax or regulatory requirements.

5. Sharing of data

We do not sell your personal data. We may share your information only with:

  • Our payment processor (Stripe): to handle transactions securely.
  • Analytics providers, such as Google Analytics: to monitor website performance.
  • Email marketing platforms, such as Mailchimp: if you subscribe to our newsletter.
  • Legal authorities: where required by law or to protect our rights.

6. International transfers

Your information may be transferred to and stored in locations outside the UK or EEA. Where that happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data retention

  • We retain booking and transaction records for up to 7 years, in line with UK tax law.
  • Communication data is retained for up to 2 years, unless you request deletion earlier.
  • Marketing preferences are retained until you opt out.

8. Your data protection rights

Under UK and EU GDPR you have the following rights:

  • Right of access: request copies of your personal data.
  • Right to rectification: correct inaccurate or incomplete information.
  • Right to erasure: request deletion of your data, subject to legal obligations.
  • Right to restrict processing: limit how your data is used.
  • Right to object: object to certain types of processing, including direct marketing.
  • Right to data portability: request transfer of your data to another provider.

To make a request, contact info@flexiestays.com. We will respond within one month.

9. Children's privacy

We do not knowingly collect or process personal data from children under the age of 13. If you believe a child has provided such information, contact us immediately and we will delete it.

10. Data security

  • We use SSL encryption, firewalls and secure hosting to protect your data.
  • Access to personal data is restricted to authorised staff only.
  • Payment details are never stored on our servers.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The latest version will always be available on our website.

12. Contact us

If you have questions or wish to exercise your data protection rights, contact:

Flexie Stays Ltd Email: info@flexiestays.com Website: www.flexiestays.com

If you are based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.

Related articles