Privacy Policy

Last updated: [date to be added]

1. Who we are

Echo Stay Apartments (“we”, “us”, “our”) provides serviced accommodation in the United Kingdom. For the purposes of UK data protection law we are the data controller for personal information collected through this website.

Contact for data protection matters: [business email address to be added]
Registered details: [company name, company number and registered office to be added, if applicable]

2. Information we collect

We may collect:

• Information you give us through enquiry forms — your name, email address, telephone number, company name, requested dates, location preferences and the content of your message.
• Booking information where a stay is arranged, including the details needed to confirm and manage that stay.
• Technical information collected automatically, such as IP address, browser type and pages visited, where cookies and analytics are in use. See our Cookie Policy.

3. How we use your information

• To respond to your enquiry and provide the information you asked for.
• To arrange, confirm and manage a booking.
• To keep records required for our business and for tax and accounting purposes.
• To improve the website and understand how it is used.
• To meet our legal obligations.

4. Legal bases for processing

We rely on: your consent (for optional cookies and marketing, where used); performance of a contract (to arrange and deliver a stay); our legitimate interests (to respond to enquiries and run our business); and legal obligation (record keeping and compliance).

5. Sharing your information

We do not sell personal information. We may share it with service providers who help us operate — for example website hosting, email delivery, cleaning and property services, payment processing and booking platforms — and with professional advisers or authorities where we are legally required to do so.

[List the specific third-party providers you use once confirmed — for example your booking platform, email provider and analytics provider.]

6. International transfers

Some of our service providers may process data outside the UK. Where that happens we take steps to ensure an appropriate level of protection is in place.

7. How long we keep information

We keep enquiry and booking records only for as long as necessary for the purposes described above and to meet legal and accounting requirements. [Confirm your specific retention periods.]

8. Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details above.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect personal information. No website or transmission method can be guaranteed completely secure, and we do not claim otherwise.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.