Privacy notice

Who we are. Stalbet Ltd is the data controller for bookings made on this site.

What we collect. When you request a booking we keep your name, email address, phone number if you give it, your message, your dates and the price. If you pay by card, the payment is taken by Square; we never see your card details, only confirmation that the payment was made and a reference for refunds.

Why. To manage your stay: confirming it, sending entry details, taking payment and handling cancellations or refunds. The lawful basis is performance of a contract with you. We send only emails about your booking, never marketing.

Who sees it. The hosts, and the services that run the site: Cloudflare (hosting, in the UK and EU), Resend (email) and Square (payments). Your dates, but no personal details, are shared with Airbnb through a calendar feed so the house cannot be double-booked.

How long. Booking and payment records are kept for six years after the stay, as UK tax rules require, then deleted. Requests that were declined, cancelled or expired are deleted after twelve months.

Cookies. Public pages set no cookies. The hosts' admin area sets one session cookie after passkey sign-in. If the anti-spam check on the booking form is enabled, Cloudflare Turnstile may set a cookie of its own for that check.

Your rights. You can ask for a copy of your data, ask us to correct or delete it, or complain to the Information Commissioner's Office (ico.org.uk). Email us and we will respond within a month.