Privacy & Cookie Policy

1. Who We Are

Stay in Plymouth is a serviced accommodation provider based in Plymouth, Devon, specialising in contractor, corporate, and relocation stays. We are the data controller for the personal data we process.

If you have any questions about this policy or how we handle your data, please contact us at hello@stayinplymouth.co.uk.

2. Data We Collect

We may collect the following types of personal data:

Information you give us directly

• Your name, email address, and phone number when you contact us or make an enquiry
• Check-in and check-out dates, number of guests, and stay type preferences
• Company name and billing information for corporate and contractor bookings
• Any messages or additional information you share with us via WhatsApp, email, or phone

Information collected automatically

• Standard web server logs including your IP address and browser type
• Pages visited and how long you spend on them (via cookies — see Section 8)

3. How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide quotes for accommodation
• Process and manage bookings, including check-in arrangements
• Send booking confirmations, invoices, and essential stay-related communications
• Manage our ongoing relationship with you during your stay
• Improve our website and services based on usage patterns
• Comply with our legal and regulatory obligations

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract — to fulfil a booking you have made or take steps prior to entering into one
• Legitimate interests — to respond to enquiries and improve our services
• Legal obligation — where we are required to process data by law
• Consent — where you have explicitly agreed, for example to receive marketing communications

5. Sharing Your Data

We do not sell your personal data. We may share it only in the following limited circumstances:

• Service providers — trusted third parties who help us operate our business (e.g. payment processors, email platforms), bound by confidentiality obligations
• Legal requirements — where we are required to disclose data by law, court order, or government authority
• Business transfers — in the event of a sale or merger, your data may be transferred as part of that transaction

We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes it was collected:

• Enquiry data where no booking results: up to 6 months
• Booking and guest records: up to 7 years (to comply with financial and legal obligations)
• Marketing contact preferences: until you withdraw consent

After these periods, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no legitimate reason to retain it
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — at any time where processing is based on consent

To exercise any of these rights, contact us at hello@stayinplymouth.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how visitors use it.

Essential cookies

These are required for the website to work and cannot be disabled. They include session management and security cookies.

Analytics cookies

We may use analytics tools (such as Google Analytics) to understand how visitors interact with our site. These cookies collect anonymised data about page views and user behaviour. You can opt out of Google Analytics via tools.google.com/dlpage/gaoptout.

Managing cookies

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of the site. For more information, visit allaboutcookies.org.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure data storage, access controls, and encrypted communications where appropriate.

While we take reasonable precautions, no method of data transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on this page, with the date of the last update shown at the top.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this privacy policy or the data we hold about you, please get in touch: