Data Privacy Policy – The Little Stay

Prepared by: Olivia Shelmerdine
Data Protection Officer

Date: 2nd June 2025

Introduction

The Little Stay (“we”, “us”, “our”) is committed to respecting your privacy and protecting your personal data. This policy explains how we collect, use, share, and protect your information, and your rights under the General Data Protection Regulation (GDPR) 2018.

By providing us with your data, you confirm that you are over 18 years old. We are the Data Controller and are registered with the Information Commissioner’s Office (ICO).

Roles and Responsibilities

Our Data Protection Officer (DPO) oversees our data protection compliance.

Contact Information:
 📧 Email: thelittlestayco@gmail.com
 📞 Phone: +66 659300036

If you are dissatisfied with how we handle your data, you can contact the ICO (www.ico.org.uk), though we encourage you to contact us first.

Summary of Our Commitments

We will always:

• Clearly explain what data we collect, why, and how we use it.
  
• Keep your data secure with technical and organisational safeguards.
  
• Respect your rights under GDPR.
  
• Cease contact and delete your data if you request.
  

Data Protection Principles

We follow these GDPR principles:

• Lawfulness, fairness, and transparency
  
• Purpose limitation
  
• Data minimisation
  
• Accuracy
  
• Storage limitation
  
• Integrity and confidentiality
  

Lawful Data Processing

We only process your data when one or more of these apply:

• You give explicit consent
  
• It’s necessary for a contract with you
  
• We are legally required to do so
  
• It protects your vital interests
  
• It’s in our legitimate interests (e.g. service improvement)
  

Your Rights Under GDPR

You have the right to:

• Be informed about how we use your data
  
• Access your personal data
  
• Correct or update your data
  
• Request deletion of your data (“right to be forgotten”)
  
• Restrict or object to processing
  
• Data portability (receive your data in a usable format)
  
• Withdraw your consent at any time
  
• Lodge a complaint with the ICO
  

How We Use Your Data

We may collect and process:

• Contact details (name, phone, email, address)
  
• Booking and payment information
  
• ID verification documents (if required by law)
  

We use this data to:

• Confirm and manage bookings
  
• Communicate with you
  
• Meet legal obligations
  
• Improve our services
  

Sharing Your Data

We do not sell your data. We only share it with:

• Payment processors
  
• Cleaning or property management staff
  
• IT and website hosting providers
  

All third parties must comply with our data protection standards.

Data Security

We use encryption, secure access controls, and staff training to keep your data safe from unauthorized access, alteration, or loss.

Data Retention and Disposal

We retain your data only as long as needed for:

• Legal or contractual obligations
  
• Service provision
  

Once no longer required, your data is securely deleted or destroyed.

International Transfers

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place or you have given explicit consent.

Data Breach Notification

If a data breach occurs that risks your rights or freedoms, we will notify the ICO within 72 hours and inform you without undue delay.

Third-Party Links and Cookies

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies separately.

We may also use cookies to enhance your experience. See our Cookie Policy for details.

Contact Us

If you have questions or want to exercise any of your rights, please contact:

Data Protection Officer – The Little Stay
 📧 Email: thelittlestayco@gmail.com
 📞 Phone: +66 659300036