Privacy policy

At Flexiestays, accessible at flexiestays.com, we are committed to protecting the privacy and personal data of our visitors, guests and partners. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the rights you have under applicable data protection law, including the UK GDPR, EU GDPR and the Data Protection Act 2018.

If you have any questions or concerns, contact us at info@flexiestays.com.

1. Consent

By using our website or services, or by making a booking, you consent to this Privacy Policy and agree to the collection and use of information as described below.

2. Information we collect

We collect different types of personal information depending on how you interact with us.

Information you provide directly

• Name, email address, phone number and billing address.
• Booking details, including dates, the property reserved and guest information.
• Communication data such as emails, messages or feedback you send us.

Information we receive from Google

• If you choose "Continue with Google", the basic profile details described in section 3.

Payment information

• Payments are securely processed through Stripe, our payment processor. We do not store card details on our servers. Stripe may collect and process your card details in accordance with its own privacy policy.

Automatically collected information

• Log files, including IP address, browser type, ISP, date and time of visit, referring and exit pages, and clicks.
• Device information, including operating system and device type.
• Usage data about how you navigate and interact with our site.

Cookies and similar technologies

• We use cookies to remember preferences, analyse website traffic and improve functionality.
• Cookies may also be used for marketing, including Google Analytics, Facebook Pixel and other tracking tools.

3. Signing in with Google

You can create or sign in to your Flexiestays account with "Continue with Google". This is optional: you can always use your email address or phone number instead.

What we receive from Google

We request only Google's basic sign-in permissions (openid, email and profile). With your permission, Google shares with us:

• your first and last name;
• your email address, and whether Google has verified it;
• your profile picture;
• your Google account ID, a unique identifier that lets us recognise you the next time you sign in.

We do not request or receive access to your Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos or any other Google service or data.

How we use it

Only to create your Flexiestays account (or link it to an existing account that uses the same email address), sign you in, and identify you on your bookings and in the messages we send you about them.

How we store and protect it

It is stored with your Flexiestays account in our secured database, sent only over encrypted (HTTPS) connections, and accessible only to authorised staff.

Who we share it with

We do not sell it, use it for advertising, or share it with advertisers or data brokers. The details you use to make a booking are shared only with the service providers that process that booking for us, as described in section 6, or where the law requires it.

AI and imagery

We do not use data received from Google to develop, improve or train artificial intelligence or machine-learning models. Flexiestays does not use Google APIs, or any data received from them, to create, edit or analyse images of people, and never to generate intimate or sexual imagery, including AI-generated imagery.

How long we keep it and how to delete it

We keep it for as long as your account is active. You can disconnect Flexiestays from your Google Account at any time at myaccount.google.com/connections, and you can ask us to delete your account and the data we received from Google by emailing info@flexiestays.com. We will do so within one month, except for booking records we must keep by law (see section 8).

Limited Use

Flexiestays' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

We use the data we collect to:

• Provide, operate and manage our website and booking platform.
• Process and confirm reservations.
• Communicate with you about customer service, booking updates and support.
• Send marketing or promotional emails, only if you have opted in.
• Detect and prevent fraud or unauthorised activity.
• Comply with legal obligations, including tax and accounting requirements.
• Improve your experience by personalising our website and services.

5. Legal basis for processing (UK and EU GDPR)

We process your personal data under the following legal grounds:

• Contractual necessity: to process bookings and deliver the services you have requested.
• Consent: where you have explicitly agreed to marketing communications or cookie tracking.
• Legitimate interests: to improve services, analyse usage and ensure site security.
• Legal obligation: to comply with accounting, tax or regulatory requirements.

6. Sharing of data

We do not sell your personal data. We may share your information only with:

• Our payment processor (Stripe): to handle transactions securely.
• Analytics providers, such as Google Analytics: to monitor website performance.
• Google reCAPTCHA: to protect our forms from spam and abuse. Its use is subject to Google's Privacy Policy and Terms of Service.
• Email marketing platforms, such as Mailchimp: if you subscribe to our newsletter.
• Legal authorities: where required by law or to protect our rights.

7. International transfers

Your information may be transferred to and stored in locations outside the UK or EEA. Where that happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data retention

• We retain booking and transaction records for up to 7 years, in line with UK tax law.
• Communication data is retained for up to 2 years, unless you request deletion earlier.
• Marketing preferences are retained until you opt out.

9. Your data protection rights

Under UK and EU GDPR you have the following rights:

• Right of access: request copies of your personal data.
• Right to rectification: correct inaccurate or incomplete information.
• Right to erasure: request deletion of your data, subject to legal obligations.
• Right to restrict processing: limit how your data is used.
• Right to object: object to certain types of processing, including direct marketing.
• Right to data portability: request transfer of your data to another provider.

To make a request, contact info@flexiestays.com. We will respond within one month.

10. Children's privacy

We do not knowingly collect or process personal data from children under the age of 13. If you believe a child has provided such information, contact us immediately and we will delete it.

11. Data security

• We use SSL encryption, firewalls and secure hosting to protect your data.
• Access to personal data is restricted to authorised staff only.
• Payment details are never stored on our servers.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The latest version will always be available on our website.

13. Contact us

If you have questions or wish to exercise your data protection rights, contact:

Flexie Stays Ltd Email: info@flexiestays.com Website: flexiestays.com

If you are based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.