YOUR INFORMATION / EFFECTIVE 26 SEPTEMBER 2026

Privacy agreement

This agreement explains how StayComply handles information when you use this holiday-let compliance register. It is written to reflect the UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations, the EU GDPR as applicable in Ireland, and the Irish Data Protection Act 2018.

1. Who controls your information

The person or organisation operating this StayComply deployment is the data controller for account, property and compliance information entered into it. Property managers using the app on behalf of an owner may act as a processor and must follow the owner's documented instructions. The operator should provide its business identity and contact details alongside this agreement before inviting other people to use the service.

2. Information used

The app may contain property names and addresses, regional settings, certificate references, inspection and renewal dates, compliance results, engineer names and registration numbers, typed declarations, availability decisions and subscription status. Browser and device providers may process technical information needed to install, display or share the app. Do not enter unnecessary personal information or special-category data.

3. Purpose and lawful basis

Information is used to maintain property safety records, monitor renewal dates, document professional sign-off, provide the requested app, manage the seven-day trial and paid access, and protect service integrity. Depending on the operator's circumstances, the lawful bases are performance of a contract, compliance with legal obligations, and legitimate interests in managing safe and compliant accommodation. Consent is used where the law specifically requires it and may be withdrawn without affecting earlier lawful processing.

4. Storage and device access

Compliance records and preferences are stored in the browser's local storage on the device. Property operations records are stored in the site's managed Netlify Database, with a device copy retained to support read access when the connection is unavailable. Property and section photographs are stored in Netlify Blobs, with captions and property associations in Netlify Database. Camera access is requested only when you choose to take a photograph; no audio is recorded, and camera access stops when you capture a photo or close the camera. Photographs require an internet connection to save and view. Deleting a photograph or its property removes the stored photographs. Anyone with access to the same browser profile may be able to view locally held information and photographs in that workspace. Users remain responsible for required copies and retention.

5. Sharing and service providers

Information is not sold. It may be disclosed where the user chooses to share it, where access is needed by authorised owners, managers or contractors, or where disclosure is required by law. Subscription checkout opens Stripe, which processes payment and related information under its own privacy notice. The browser or operating-system share and installation services are controlled by their respective providers.

6. International transfers

Device, browser, database, payment or hosting providers may process limited technical, operational or payment information outside the UK, Ireland or European Economic Area. The relevant provider is responsible for appropriate safeguards, such as an adequacy decision or approved contractual clauses.

7. Retention and security

Keep compliance records only for as long as required by applicable law, insurance terms, contractual needs or a defensible audit purpose. The operator should define and periodically review its retention schedule. Users must secure their device, browser profile and access credentials, limit access to authorised people, verify recipients before sharing and report suspected loss or misuse promptly.

8. Your rights

Subject to legal limits, individuals may request access, correction, deletion, restriction, portability or an objection to processing, and may withdraw consent. Requests should be made to the operator of this deployment. UK concerns may be raised with the Information Commissioner's Office at ico.org.uk; Irish concerns may be raised with the Data Protection Commission at dataprotection.ie. Individuals may also complain to the supervisory authority where they live or work.

9. Children, automated decisions and updates

The app is for business users and is not directed to children. It does not make solely automated decisions with legal or similarly significant effects. Compliance status remains the user's professional decision. Material changes to this agreement should be shown in the app with an updated effective date and, where necessary, renewed acceptance.

10. User responsibility

By continuing, you confirm that you are authorised to enter the information, that you will provide any privacy information required to engineers, owners or other individuals, and that you understand this register supports—but does not replace—professional advice or statutory compliance duties.