Privacy policy
Aero Stays Ltd · Effective 4 September 2026 · Registered in England & Wales · Company no. 14053523 · VAT no. 517977935
What we collect
The details you give us to run your stay: name, contact details, booking history, and any correspondence — including WhatsApp threads with our team. Your card number is entered directly with Stripe, our payment provider, and never touches our systems.
How we use it, and our lawful bases
To take and manage bookings and run check-in (performance of our contract with you); to keep booking and invoicing records (legal obligation); to provide guest support and protect our guests and properties (legitimate interests); and — only if you opt in — to send one marketing email a month (consent, withdrawable any time via the unsubscribe link). We do not sell personal data.
Who we share it with
Guesty, the property-management platform that runs our reservations; Stripe, who process your card in the browser; Resend, who deliver our booking and enquiry emails; and Supabase, where our booking records are stored. Our website and services run on Vercel, Render and Cloudflare. Each processes data under contract and only for the stated purpose. Our analytics (Plausible) are cookieless and receive no personal data at all.
Where it goes
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by UK-approved safeguards — the UK extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement / Addendum — and each provider remains bound by contract to process data only on our instructions.
How long we keep it
Booking and invoicing records are kept for 6 years to meet tax obligations. Guest contact details attached to a booking are deleted 12 months after checkout. Marketing preferences are kept until you unsubscribe.
Your rights
Under UK GDPR you can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent, at any time. Email bookings@aerostays.co.uk and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, though we would welcome the chance to resolve any concern first.
Cookies & contact
The only cookies on this site are two set by Stripe on the checkout page (__stripe_mid and __stripe_sid) to protect card payments against fraud. We set none of our own and use no advertising or tracking cookies, which is why there is no cookie banner. Data controller: Aero Stays Ltd, Onyx House, 12 Phoenix Business Park, Birmingham B7 4NU — bookings@aerostays.co.uk. Registered with the Information Commissioner’s Office, registration ZC052039.