Privacy Policy

Stays: Data Protection & Privacy Policy Notice

This privacy policy applies to the services provided by Stays York Limited trading as Stays York.

Our registered office is at 1 Bootham, York, YO30 7BN. Company Number 14214864

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal information.

It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.

We collect, use and are responsible for certain personal information about you. When we do so, we are subject to the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (EU GDPR). We are responsible as the ‘controller’ of your personal information for the purposes of those laws. This notice explains how we collect, use, protect, transfer and share your personal information.

Except as set out below, we do not share, or sell, or disclose to a third party, any personally identifiable information collected at this site.

Here is a list of the information we collect from you, either through our web site or because you give it to us in some other way, and why it is necessary to collect it:

Basic identification and contact information

This information is used:

to provide you with the services which you request;
for verifying your identity for security purposes;
for marketing our services and products;
Information which does not identify any individual may be used in a general way by us or third parties, to provide class information, for example relating to demographics or usage of a particular page or service.

This personal information is required to provide services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing services to

you. We will always request the minimum amount of data to enable us to deliver our services effectively.

Methods of Collection

In the general conduct of business, we collect information relevant to the services being provided by us from a number of sources:

yourself
next of kin
spouse / partner / family member
business associates
employers

Third party sources including:

insurance companies
through our professional advisors such as accountants or law firms
through consent to third parties disclosing information about you to us that they have collected
from cookies on our website

Such information will generally be collected directly via the use of any of our standard forms, over the internet, via email, in our branches or through a telephone conversation with you.

We may also collect personal information through our affiliates or suppliers. In addition, you may choose to submit information directly to us via several methods, including:

through websites
in response to marketing or other communications
through social media
by signing up for a product or service
through participation in an offer, program or promotion
in connection with an actual or potential business or employment relationship with us

You may also agree to third parties disclosing information about you to us that those third parties have collected.

We, our service providers and partners, collect certain information by using automated means, such as cookies and web beacons, when you interact with our advertisements, mobile applications, or visit our websites, pages or other digital assets. The information we collect in this manner may include: IP address, browser type, operating system, referring URLs and information on actions taken or interaction with our digital assets.

When you send a message, we collect the data you have given to us in that message in order to obtain confirmation that you are entitled to receive the information and to provide to you the information you need. We record your request and our reply in order to increase the efficiency of our business / organisation. We may keep personally identifiable information associated with your message, such as your name or email address.

Purposes of Collection

Under data protection law, we can only use your personal information if we have a proper reason for doing so, including:

to comply with our legal and regulatory obligations
for the performance of our contract with you or to take steps at your request before entering into a contract for our legitimate interests or those of a third party
where you have given

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

Generally, we will collect, use and hold your information for the purposes of:

Process payments / transactions including accounting, authorisation,
Provide, administer and communicate with you about our products, services, offers, programs and promotions, their issuers, acquirers, retailers and partners
Compile business directories, including business contact information
Operate, monitor, evaluate and improve our products, services, websites, mobile applications, other digital assets and business
Developing new products and services
Managing communications, assessing effectiveness and optimisation of advertising
Functionality of our websites, mobile applications and other digital assets
Evaluate your interest in employment and contact you regarding possible employment
Staff administration and to ensure safe working practices

Financial information relating only to your credit cards

This information is never taken by us either through our website or otherwise. At the point of payment, you are transferred to a secure page on the website of WorldPay / SagePay / PayPal / MoneyBookers or some other reputable payment service provider. That page may be dressed in our “livery”, but it is not controlled by us. Our staff and contractors never have access to it.

Promotional Communications

We may, with your consent, use your personal information to send you updates (by email, text message, telephone or post) about our services, including offers, promotions or new products or services. We will always treat your personal information with care and never share it with other organisations for marketing purposes unless otherwise stated in this privacy policy.

You have the right to opt out of receiving promotional communications at any time by:

contacting us at info@staysyork.com
contacting us at our head office

We may ask you to confirm or update your marketing preferences if you instruct us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

Information We Share

We do not sell or otherwise disclose personal information we collect about you, except as described in this notice or as indicated via the consent process at the time the data is collected. We share the information we collect with, but not limited to:

Vetted affiliates, consultants and partners / financial institutions / insurance companies for business facilitation to provide required services
Formally contracted service providers to perform services on our behalf
Helpdesk and Call Centre’s who help us to carry out our services. We contractually require these service providers to safeguard the privacy and security of personal information they process on our behalf and authorise them to use or disclose the information only as necessary to perform services on our behalf or comply with legal requirements
Review and customer satisfaction specialists to seek customer opinion and feedback

Where your personal information is held

Your personal information may be held at our offices and by third-party service providers, representatives and agents, as described above under “Information We Share”.

Some of these third parties may be located outside the United Kingdom. Where your personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it in accordance with applicable data protection laws.

For more information, see “Transferring Your Personal Information Outside the UK” below.

How long do we keep information for?

We will keep information for a reasonable amount of time in order to perform the purposes listed above. We only keep your information for as long as necessary. We generally keep personal information for 7 years after last contact with you in order to keep records required by law or to respond to any questions from you after we have completed our services.

Transferring Your Personal Information Outside the UK

To provide our services, we may need to transfer your personal information outside the United Kingdom. For example, this may occur if:

you or our service providers are located outside the UK; or
it is necessary to use service providers that process personal information outside the UK.

Where we transfer your personal information outside the UK, we will ensure that appropriate safeguards are in place to protect your information and that the transfer complies with applicable data protection laws. These safeguards may include the use of the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries that have been recognised as providing an adequate level of protection for personal information.

Your Rights and Choices

Your rights regarding the sensitive / personal information we maintain about you enable you to exercise choices about what personal information we collect from you, how we use that information, and how we communicate with you.

These rights are:

Access

You have the right to:

obtain confirmation that we hold personal information about you
request access to and receive information about the personal information we maintain about you
receive copies of the personal information we maintain about you
object to how we use your data

The right to access personal information may be limited in some circumstances by local law requirements. To exercise these rights, please see the details in ‘How to Contact Us’ below.

Update and correct inaccuracies in your personal information

If you feel that the information we hold about you in incorrect or inaccurate you can contact us outlining the information you feel is incorrect of inaccurate. If we refuse to correct your personal information, we will provide you with a written notice that sets out the reasons for our refusal (unless it would be unreasonable to provide those reasons) and provide you with a statement regarding the mechanisms available to you to make a complaint. We will provide you with access to information we hold about you.

Data Portability and the right to be forgotten

You have the right to receive this information you provided us in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations. You also have the right to require us to delete your personal information in certain situations.

How to Contact Us / Complaints and Feedback

If you wish to make a complaint about a breach of your personal information, applicable privacy laws / principles or would like access and / or update information or preferences you provided, you may:

E-mail us at:

info@staysyork.com Or

Write to us at:

Data Protection Officer, Stays York Limited, TA Stays York, 1 Bootham, York, North Yorkshire, YO30 7BN (Company Number: 14214864)

To assist us in responding to your request, please give full details of the issue. We attempt to review and respond to all complaints within a reasonable time. If we cannot for lawful reasons complete your request, we will explain this to you to the extent that we lawfully can.

The General Data Protection Regulation (GDPR) also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or telephone 0303 123 1113.

How We Protect Personal Information

The security of your personal information is very important, and Stays York is committed to protecting the information we collect. We maintain administrative, technical and physical safeguards designed to protect the personal information you provide, or we collect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Changes to this Privacy Policy

We may change this privacy notice from time to time. When we do, we will update the version date on our website.

Contact

If you have questions or comments about this Privacy Policy, please contact us: By email: info@staysyork.com