Privacy Notice

Last updated: March 2026

Introduction

StayViz Ltd ("StayViz", "we", "us", or "our") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, store, and share your personal data when you visit our website, use our hotel discovery tools, or make bookings through our platform. We are the data controller for the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using StayViz, you acknowledge that you have read and understood this Privacy Notice. If you do not agree with our practices, please do not use our services.

What Data We Collect

We collect personal data that you provide directly, data generated through your use of our services, and data received from third parties. The categories of data we collect include:

Information you provide

• Name, email address, and contact details when you create an account or make a booking
• Payment information (processed securely by our third-party payment providers — we do not store full card numbers)
• Guest details required to complete hotel reservations, including names, nationality, and special requests
• Communications you send to us, including enquiries, feedback, and support requests
• Reviews, ratings, and photos you submit to the platform

Information collected automatically

• Device and browser information, including IP address, browser type, operating system, and screen resolution
• Usage data such as pages visited, search queries, hotels viewed, and time spent on pages
• Location data derived from your IP address to provide locally relevant hotel results and pricing
• Cookies and similar tracking technologies (see our Cookie Settings page for details)

Information from third parties

• Hotel partners who provide booking confirmation details and stay information
• Analytics providers who help us understand platform usage patterns
• Fraud prevention services that verify transaction legitimacy

How We Use Your Data

We process your personal data on the following legal bases and for the following purposes:

Performance of contract

• Processing and managing your hotel bookings
• Sending booking confirmations, reminders, and post-stay communications
• Providing customer support in relation to your reservations
• Processing payments and refunds

Legitimate interests

• Improving our platform, services, and user experience through analytics
• Detecting and preventing fraud, abuse, and security incidents
• Displaying personalised hotel recommendations and pricing
• Conducting internal research and analysis to develop new features

Consent

• Sending marketing communications about deals, new destinations, and platform updates
• Setting non-essential cookies for analytics and advertising purposes

Cookies

We use cookies and similar technologies to operate our platform, remember your preferences, understand how you interact with our services, and measure the effectiveness of our communications. Essential cookies are required for the platform to function. Analytics and marketing cookies are only set with your consent.

For full details on the cookies we use, their purposes, and how to manage your preferences, please visit our Cookie Settings page.

Third-Party Sharing

We do not sell your personal data. We share your data only in the following circumstances:

• Hotel partners: We share guest names, contact details, and booking specifics with hotels to fulfil your reservation.
• Payment processors: Your payment data is securely transmitted to our PCI-DSS compliant payment providers to process transactions.
• Analytics providers: We use services such as Microsoft Clarity to analyse platform usage. These providers process data in accordance with their own privacy policies.
• Legal requirements: We may disclose personal data where required by law, regulation, legal process, or enforceable governmental request.
• Business transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

• Account data: Retained for the duration of your account and for up to 2 years after account closure.
• Booking records: Retained for 6 years after the booking date for tax, accounting, and legal compliance purposes.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.
• Analytics data: Aggregated and anonymised data may be retained indefinitely. Identifiable analytics data is retained for up to 26 months.
• Support correspondence: Retained for up to 3 years after the last interaction.

Your Rights (GDPR)

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to data portability: You may request a machine-readable copy of your data to transfer to another service.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer using the details below. We will respond to your request within one month. If your request is complex, we may extend this by a further two months, and we will inform you of any such extension.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Contact Our Data Protection Officer

If you have any questions about this Privacy Notice, our data practices, or wish to exercise your data protection rights, please contact our Data Protection Officer: