What personal data we collect, why, how long we keep it and your rights.
This policy explains what personal data this website collects, why, how long we keep it, who we share it with and the rights you have. We only collect what we need to run the service described on the site.
| Data | Why we collect it | Kept for |
|---|---|---|
| Account details – name, email, password (hashed), phone, address, profile photo | To create and secure your account, show your name on messages and bookings, and contact you about them | While your account exists, then deleted within 30 days of account deletion |
| Contact form submissions – name, email, phone, subject, message | To answer your enquiry | 12 months after the last reply |
| Viewing bookings – property, date and time, party size, notes, and for guests your name, email and phone | To arrange the viewing, confirm it and send status updates by email | 24 months after the viewing date |
| Agreements and signatures – the agreement text, your typed name and signing time | To record your acceptance of the agreement | 6 years after signing (contract records) |
| Payments and proofs – amount, reference, chosen method, your uploaded proof of payment, verification notes | To verify your payment, issue a receipt and keep accounting records | 6 years after verification (accounting records); rejected proofs are deleted after 12 months |
| Wishlist, cart and notifications – saved properties, cart contents, in-app notifications | To provide those features and, if you opt in, email you when a saved property changes | While your account exists; guest carts expire after 30 days |
| Messages to agents – your name, email, phone and message | To pass your enquiry to the agent | 24 months |
| Agent profiles (agents only) – bio, licence number, phones, public email, social links | To publish your public agent page | While the agent account is active |
| Website analytics – page path, referrer, campaign tags, device type, a daily rotating hash of your connection | To count visits and see which pages are used. No cookie is set and no IP address is stored, so visits cannot be traced back to you | 365 days |
| Meta Pixel / Conversions API – only with your consent: hashed email or phone, the pages and actions (viewing booked, item added to cart) | To measure advertising on Meta platforms | Sent to Meta; event records kept by us for 90 days |
| Cookies | See the section below | See below |
Essential cookies (always on): the session cookie that keeps you signed in and holds your cart, the security (CSRF) token, and the cookie_consent cookie that remembers your choice for 180 days.
Optional cookies, set only after you accept them in the cookie banner or under Cookie settings in the footer:
_fbp to measure our adverts.googtrans cookie to remember your language, and the embedded Google Map sets Google cookies when it loads.You can change or withdraw consent at any time from Cookie settings in the footer; the page reloads and the scripts you declined are not loaded.
We do not sell personal data.
You can ask us to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent. Account holders can edit most details under Profile and manage wishlist emails under Favorited Properties. To exercise any other right, or to delete your account, use the contact page; we respond within 30 days. You also have the right to complain to your data protection authority.
Passwords are stored hashed, payment proofs are kept on private storage that only administrators and you can open, and all traffic should be served over HTTPS in production.
We will post any changes here and update the date below.
Last updated: 22 October 2026.
We use essential cookies to run this site. With your permission we also use cookies for analytics, live chat and translation. See our privacy policy.