This document sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It has been updated for the purposes of the EU General Data Protection Regulation 2016/679 (GDPR), which will replace the Data Protection Act 1998 with effect from 25th May 2018.

By using our website ("Website" or "site"), you indicate that you accept this Privacy Policy. Please do not use our site if you do not agree to this Privacy Policy.

EveryStay LTD ("we", "us") is registered in England and Wales, Company registration number: 10342010. Our registered office is: 4th Floor Thomas House, 84 Eccleston Square, London SW1V 1PX, United Kingdom.

We are registered with the UK Information Commissioner’s Office (ICO), as a data controller under registration number: ZA209049

We treat the personal information of site users with the utmost respect and confidentiality and take reasonable steps to ensure that your personal information is stored securely and accurately.

In general, we use the information we collect about you to help our advertisers provide accommodation solutions to users of our site, provide information services to relevant third parties, improve the features and services we offer and support our own marketing and promotion efforts.

By accessing our Website and utilising our services, you acknowledge that you have read understood this Privacy Policy and the information collection and handling practices outlined in it.

We may change this Privacy Policy from time to time, so please check back regularly to keep informed of any updates.

Scope

This Privacy Policy describes in detail our policy and practices regarding our collection, use and disclosure of information about you.

We understand that providing information online involves a great deal of trust on your part. We take this trust very seriously, and make it a high priority to ensure the security and confidentiality of the personal information you provide to us when you visit our Website or use our services.

This Website is not intended for children and we do not knowingly collect data relating to children.

What information we collect from you in general

We receive and store any information you enter on our Website or give us in any other way. This includes information that can be used to identify you as an individual or to contact you directly ("personal information" or “personal data”, as defined in data protection legislation).

Personal information includes information you provide us such as your first and last name, telephone number, postal and email addresses, user name and password, and payment information (such as your credit card number, cardholder name, and card expiration date). We may also request information about your travel plans, style, and preferences, including about your property (if you are an advertiser) and the type of property you wish to rent.

We do not collect any sensitive personal data, or “special categories of data” (as defined in the GDPR) about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

You can choose not to provide this personal information to us, but in general some information about you is required in order for you to receive relevant offerings from us and our partners and enjoy other benefits of being a user of the Website; make rental property bookings; or participate in a survey, promotion or contest. In addition, some information is also required in order for you to ask us a question or initiate other transactions on our site.

We also collect and store details of enquiries, bookings, transactions, refunds, chargebacks or other claims or events relating to advertisements and/or payments.

Other information we may choose to collect may also include details such as your IP address, information identifying your device, and website browsing history to the extent that information is about you.

We endeavour to ensure that your personal information is relevant to its intended use, accurate, and complete. Please keep us informed if your personal data changes during your relationship with us.

Automatic Collection of Information

We automatically collect some information from your computer or device when you visit the Website. For example, we will collect session data, including your IP address, web browser software, and referring website. We also may collect information about your online activity, such as properties viewed and enquiries made. One of our goals in collecting this automatic information is to help us understand the interests and preferences of our users and customise your user experience.

Cookies and Other Web Technologies

Like many websites, we use "cookies" to enable us to personalise your visits to our site, simplify the signing-in procedure, keep track of your preferences and to track the usage of our Website. Cookies are small pieces of information that are stored in the hard drive of your computer by your browser. Your browser will have the option to prevent websites using cookies (your browser's help screen or manual will tell you how to do this), but please note that this may reduce the functionality of our site and other websites.

Like all websites, our servers automatically record "log files" containing information about the volume and characteristics of our website traffic e.g. Internet Protocol (IP) address, numbers of pages viewed, length of time spent on site. We use log files to build pictures of how our site is used, which help us to monitor and improve the service. We cannot identify you from your log files alone. You can find out more detailed information in our Cookie Policy.

Cookies and Display of Advertising/Your Choices

Data collected to serve you with relevant advertising

EveryStay is committed to providing you with relevant content and information across our sites.

To do this, we may collect information about your travel-related searches and other site activities and use this information to serve you with ads on our sites (for this we do not collect personal information) or elsewhere online that match your interests (for this we ask you for consent first).

Data collected by business partners and to understand your behaviour and serve you relevant advertising.

We allow third parties (such as Google Analytics and Hubspot) to collect information about your online activities through cookies and other technologies. The information gathered by these third parties is used to make predictions about your characteristics, interests or preferences and to display advertisements on our sites and across the Internet tailored to your interests.

You will be asked to give you consent to cookie tracking when visiting our sites. If you don’t give consent, we will not track you via cookies.

How we use your information General purposes

EveryStay will only use your personal data when the law allows us to. Most commonly, we use the information we collect about you for the following general purposes, relying on the appropriate lawful bases as shown in brackets:

  • to provide you with the products and services you request (contract);
  • to provide you with booking enquiry confirmation and updates (contract);
  • to manage your account, including processing payments and providing travel notifications (contract);
  • to communicate with you in general (contract);
  • to respond to your questions and comments (contract and legitimate interests);
  • to measure interest in and improve our products, services, and Website (legitimate interests);
  • to notify you about special offers and products or services available from us or our partners that we think may be of interest to you (consent);
  • to otherwise customize your experience with the Website (legitimate interests);
  • to solicit information from you, including through surveys (contract and legitimate interests);
  • to resolve disputes, collect fees, or troubleshoot problems; to prevent potentially prohibited or illegal activities (contract and legitimate interests);
  • to enforce our Terms of Use (contract and legitimate interests); and as otherwise described to you at the point of collection (contract and legitimate interests).

Generally, we only rely on consent as a lawful basis for processing your personal data in relation to sending direct marketing communications. You have the right to withdraw consent to marketing at any time, by updating your preferences via the link at the bottom of any email you receive from us.

Where you opt out of receiving marketing communications, this will not apply to personal data provided to us to enable us to fulfill our contract with you.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the lawful basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

If you have signed up as an advertiser, we will send you email messages at the email address you provide to us. Advertisers can update their information and change settings on their 'Your Account' page once signed in.

Email Communications

We want to make it easy for you to take advantage of travel-related opportunities on our Website. One way we do this is by sending you email messages that contain information about your travel-related interests. We believe these email messages will provide you with useful information about travel-related special offers available through our sites. Please note that you will have the opportunity to choose not to receive these email messages in any such email we send, or by updating your preferences via the link at the bottom of any email you receive from us

Please review "Your rights and choices with respect to the collection and use of your information" section below for more information.

With whom we share your information

EveryStay may share your information with the following entities:

  • EveryStay Holding UG, our parent company, registered with the District Court of Mannheim, Germany, under the number HRB 726243
  • Suppliers including but not limited to property managers or owners who fulfil your booking enquiries. Throughout the Website and its affiliated sites, all products and services provided by third-party suppliers are described as such.
  • Payment solution providers such as PayPal (if you use such payment solution providers), whereby you agree that we may share data about you with PayPal/the other provider and vice versa in order to facilitate or assess your use of the online payment platform or for other internal purposes. Such data may include details of enquiries, bookings, transactions, refunds, charge-backs or other claims or events relating to advertisements and/or payments.
  • Please note that these suppliers also may contact you as necessary to obtain additional information about you or your travel plans, to facilitate your travel reservations, or for other purposes consistent with the practices described in their privacy policies and terms of use.
  • Third-party vendors who provide services or functions on our behalf, including business analytics, payment processing, customer service, marketing, public relations, distribution of surveys or promotions, and fraud prevention. We may also authorise third-party vendors to collect information on our behalf, including, for example, as necessary to operate features of our Website or to facilitate the delivery of online advertising tailored to your interests (see section on Cookies above). Third-party vendors have access to and may collect information only as needed to perform their functions and are not permitted to share or use the information for any other purpose.
  • Business partners with whom we may offer products or services in conjunction, or whose products or services we think may be of interest to you. You can tell when a third party is involved in a product or service you have requested because their name will appear either with ours or separately. If you choose to access these optional services, we may share information about you, including your personal information, with those partners. Please note that we do not control the privacy practices of these third-party business partners.

We also may share your information if we believe, in our sole discretion, that such disclosure is necessary...

  • To comply with legitimate and enforceable subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us.
  • To investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of EveryStay, our customers, or others; and in connection with our General Terms of Use and other agreements. In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

We also may share aggregate or anonymous information with third parties, including advertisers and investors. For example, we may tell our advertisers the number of visitors our Website receives or the most popular holiday destinations. This information does not contain any personal information and is used to develop content and services we hope you will find of interest.

International Transfers

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
  • Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US.

How Long We Keep Your Information for

We may retain certain information associated with your use of the Website in our archives, including for analytical purposes as well as for record-keeping integrity. The periods for which we retain your information depend on the purpose for which we collected it and we use it.

We will not retain your personal information for longer than is necessary for our business purposes or for legal requirements.

Your rights and choices with respect to the collection and use of your information

Under certain circumstances, you have rights under data protection legislation in relation to your personal information, as follows:

  • You can choose not to provide us with your personal information, although it may be needed to take advantage of certain features offered on the Website.
  • You have the right to ask us what personal information we hold about you by contacting us to make a Subject Access Request.
  • You have the right to request correction of your personal data, if you believe it is incorrect.
  • You may request erasure of your personal data (subject to certain requirements).
  • You have the right to object to your personal data being processes (in certain cases).
  • You have the right to restrict the processing of your personal data (in certain cases).
  • You have the right to request a transfer of your personal data (in certain cases).
  • You will be given the opportunity to unsubscribe from promotional messages in any such email we send.
  • Please note that we may send you other communications, including service announcements, and administrative messages relating to your use of the Website.

The Help portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Please note that if you refuse to accept cookies from the Website, you will not be able to access portions of our site.

You have the right to make a complaint at any time to the ICO, the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

To action any of these rights, please contact us at the address below (see "Contact Us").

Subject Access Requests

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request.

We aim to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If your request is clearly unfounded, repetitive or excessive, we may charge you a reasonable fee for responding. Alternatively, we may refuse to comply with your request.

How we protect your information

We are committed to protecting the information we collect. While no website can guarantee security, we have implemented and maintain appropriate physical, administrative, technical, and organisational measures to protect the personal information you provide us against unauthorised or unlawful access, use of disclosure, and against accidental loss, damage, alteration or destruction. For example, only authorised employees are permitted to access personal information, and they only may do so for permitted business functions.

External links

Our Website may include links to third party websites. If you access other websites from the links provided on our Website, the operators of those websites may collect information from you which will be used by them in accordance with their Privacy Policy, which may differ from our Privacy Policy. We recommend that you examine the privacy statements posted on those other websites to understand their procedures for collecting, using, and disclosing personal information.

Changes to this Privacy Policy

EveryStay may change or modify this Privacy Policy in the future. We will note the date that revisions were last made to this Privacy Policy at the bottom of this page, and any revisions will take effect upon posting. We encourage you to check this Privacy Policy from time to time to review the most current version.

How you can contact us

We have appointed a Privacy Manager who is responsible for overseeing questions in relation to this Privacy Policy. If you have questions about this Privacy Policy, please contact us: The Privacy Manager at EveryStay LTD, 84 Eccleston Square, London SW1V 1PX, or email: help@everystay.com with the subject: ‘To the Privacy Manager’.

Call Recording and Monitoring

Please be aware that calls to and from EveryStay may be recorded. We may use the call recordings to monitor our customer service for quality or compliance purposes, to check the accuracy of the information you provide us, for fraud prevention purposes, or to provide training to our staff. We will retain the call recordings for as long as reasonably necessary to perform such activities and then delete them. Any personal information obtained from you during the call will be treated in accordance with the provisions of this Privacy Policy.

Cookies

This policy is intended to help you understand how EveryStay uses cookies on our website (https://www.everystay.com/) and what they are. For more information on how your information is collected and processed by EveryStay, please see our Privacy Policy [https://www.everystay.com/privacy-policy].

Cookies are small text files, typically containing letters and numbers, which are downloaded onto your computer, smart phone or tablet device by websites that you visit. Cookies are widely used to make websites work or operate more efficiently – they help us to improve our site and deliver a better and more personalised service.

There are different types of cookies which each serve different purposes, as follows:

Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website and make booking enquiriess.

Analytical/performance cookies: These allow us to recognise and count the number of visitors to our website, and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. Further detail on our use of Google Analytics is set out below.

Functionality cookies: These are site-specific cookies and are used to recognise you when you return to our website. This enables us to personalise our content for you, enable you to log in and out of our service and remember your preferences. These cookies include both “Session Cookies”, stored in the working memory of your computer (RAM), or so called “Permanent Cookies” stored on the hard drive of your computer.

Targeting cookies: These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website more relevant to your interests.

The following information is gathered, stored and processed through the use of our cookies: Referrer-URL; anonymised IP address; date of the server inquiry; technical information regarding the OS; and browser and possible plug-ins of your device.

If you do not wish to enable cookies, you will still be able to browse our website. You can configure your browser so that it does not accept cookies, or so that you will be informed on every occasion a website wishes to store a cookie on your computer. It is also possible to erase any already existing cookies stored by your browser.

Use of Google Adwords conversion-tracking

This website utilizes the online advertising program "Google AdWords” and the conversion tracking within the framework of Google AdWords. The conversion-tracking cookie is set on the user’s browser, if he clicks on an ad delivered by Google.. These cookies lose their validity after 30 days. They are not used to acquire personal identification data. If the user visits a certain page of this website and if the cookie has not yet expired, Google and we will be able to tell that the user clicked on the ad and was forwarded to this page. Each Google AdWords client gets a different cookie. Thus, cookies cannot be tracked via the website of AdWords clients.

The information collected by the conversion cookies are used to provide aggregate conversion statistics to AdWords clients who have opted-in for conversion tracking. Clients are informed about the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not get any information enabling them to identify users personally.

If you do not want to participate in the tracking program, you can refuse the use of this program by easily deactivating the google conversion-tracking cookie via your internet browser through the user settings. In this case, you will not be included in the conversion tracking statistics. Further information concerning Google data privacy can be found at http://www.google.de/policies/privacy/

Web analysis service

This website uses Google Analytics, a web analysis service of Google Inc. ("Google”). Google Analytics uses Cookies to enable us to conduct an analysis of the use of the website. The information generated by the cookies about your use of the website will normally be transmitted to a server in the US, where it is stored. In the case of activating an IP anonymiser for this website, your IP address will however be abbreviated by Google within the member states of the European Union or within other member states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a server in the US, where it is abbreviated. On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services connected to the website use and the internet use for the benefit of the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be linked to other data retrieved by Google. You may prevent the storage of cookies by making the appropriate settings in your browser. However, we should point out that in that case you might not be able to use the full functionality of this website. You may permanently refuse Google to collect data generated by cookies regarding the use of the website (including your IP address) and to process them by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plugin or for browsers regarding mobile devices, please click on the following link in order to set an opt-out cookie, which disables Google Analytics to collect data on this website in the future (this opt-out cookie only functions for this browser and this domain). If you delete your cookies on this browser, you have to click again on this link: https://tools.google.com/dlpage/gaoptout?hl=en

You can prevent the data gathering through Google Analytics by clicking on the following link. An Opt-Out-Cookie will be put in place, which will prevent your data being gathered when you visit this website:

Deactivate Google Analytics

This website also uses Hotjar, another web analysis service provided by Hotjar Ltd., and HubSpot, a CRM service provided by HubSpot, Inc. To function properly, like most tracking tools, Hotjar and HubSpot each store cookies of their own on your browser. These are needed to display the correct content to you.

Hotjar does not track or record visitors which have cookies disabled. As a matter of fact, the Hotjar script does not even initialise its different components if it detects that cookies are disabled. Cookies that Hotjar stores on your browser expire automatically after 365 days.

Details of these cookies can be found here [click on Hotjar and Hubspot for their cookies pages].

[Privacy Policy updated: 17 May 2018]