Privacy policy

1. Who is responsible

StayLocal B&B is the name of this UK bed & breakfast directory. The organisation or individual operating it is responsible for deciding how personal information is used. Their legal identity and contact details must be added to this notice.

Website and privacy enquiries: info@staylocalbnb.co.uk.

A business name is not always personal information, but a sole trader’s name, a home address used for a B&B, or a personal telephone number or email address can identify an individual and are covered by data protection law.

2. Information and its sources

Imported UK listings come from bnb-directory.com, through a supplied directory export. They can include the property name, address, area, region, telephone number, website and original listing link. Some Harrogate listings also include business email addresses and information sourced from property websites.

Imported listings are marked unclaimed and their details may be incomplete or out of date. Where available, the original directory link appears on the property page. Being listed does not mean an owner has joined, approved the listing or agreed to marketing.

Information being publicly available does not remove an individual’s privacy rights or automatically authorise reuse, outreach or publication. Directory reuse permissions and the appropriate basis for processing must be checked separately.

3. How details are stored and displayed

The current listing catalogue is stored in the website’s published application files, not in a private owner account. It is delivered to visitors’ browsers so they can search and view properties. Published business contact details are public, not confidential; visitors and search engines may read or copy them.

The owner form asks for a B&B name, town or postcode, owner name, email address, optional website and plan choice. At present, these values remain in the page during the preview: submitting the form does not send or save them, verify ownership, change the listing or take a payment.

Do not enter identity documents, financial details or sensitive personal information. If working owner accounts, claims or payments are introduced, this notice will need updating before those services collect information.

4. Purposes and lawful basis

Listing information is used to help travellers find UK B&Bs, compare locations and contact properties directly. It also identifies the property an owner wishes to claim. No automated owner outreach or mailing-list enrolment is implemented in the current website.

The proposed lawful basis for publishing business-related personal information is legitimate interests: supporting discovery of independent accommodation. This is not a claim that an assessment has been completed. The operator must document necessity, proportionality, owners’ reasonable expectations and the impact on them before relying on this basis.

Public-directory data must not be treated as marketing consent. Any future claim invitations or promotional messages need a separate assessment of UK GDPR and electronic-marketing rules, including appropriate opt-out arrangements. Future membership administration may rely on steps requested before a contract or performance of a contract; legal obligations may apply to payment records if payments are enabled.

5. Sharing, travel suggestions and service providers

Public listing details are shared with website visitors. The current website has no feature for selling private owner form submissions or sending them to advertisers.

The trip planner and travel assistant send your submitted preferences or messages to Lovable AI Gateway and its model provider to produce suggestions. Listing names, locations, addresses and selected property information are also included; the current recommendation requests do not include owner telephone numbers or email addresses. The assistant sends the conversation history with each reply request.

Chat history is held in memory on the current page, not saved as an account history by this website. Closing the chat keeps it on that page; clearing it or reloading removes that local history. This does not mean service providers delete their request logs at the same time. Provider logging, retention and processing locations need confirming. Avoid sharing sensitive information in travel requests.

Hosting, media delivery, fonts and error-reporting services may process technical information such as IP addresses, browser information and request or error records. Providers may process information outside the UK; the operator must confirm the relevant locations and safeguards and include them here. External property and booking websites handle information under their own policies.

6. Retention and security

Imported listing records currently remain in the published catalogue until it is changed and republished. There is no automatic expiry or owner self-service deletion. A review schedule and retention periods for listing data, privacy correspondence and provider logs have not yet been set.

Public listing data should not contain private owner verification material. Removing a record from the site may not immediately remove copies held in browsers, search-engine caches or historic hosted files; any removal process must consider these copies too. No website can guarantee absolute security.

7. Your rights and listing corrections

Depending on the circumstances, you can ask for access to your personal information, correction, erasure or restriction, and object to processing based on legitimate interests. Portability applies in certain cases; where processing relies on consent, you can withdraw it. These rights are not absolute.

Corrections, privacy objections and removal requests must not require a paid membership. Email info@staylocalbnb.co.uk, identifying the listing and the detail in question without including unnecessary personal documents. The operator may need proportionate evidence of identity or authority and should normally respond within one month, subject to lawful extensions.

Privacy request contact: info@staylocalbnb.co.uk. The preview claim form does not deliver requests. If your information was obtained indirectly, the operator must also provide privacy information within the applicable time limits—normally within one month, or earlier at first contact or disclosure—unless a documented legal exception applies. Simply publishing this page may not fulfil that obligation.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

8. Changes to this notice

The date above will change when this notice is revised. It must be reviewed when owner claims, contact forms, payments, marketing or additional tracking become active. This draft describes the current website and is not a statement that all data protection requirements have been met.