Privacy policy.

Last updated 13 October 2026

What we do with your personal data, why we are allowed to, and what you can ask us to do about it.

Who we are

Ideal Escapes Limited, registered in England and Wales under number 17230838, registered office 12 Fratton Road, Portsmouth, England, PO1 5BX, is the controller of the personal data described here. We are registered with the Information Commissioner's Office under number [ICO REGISTRATION NUMBER].

For anything about your data, write to hello@idealescapes.co.uk or ring +447349958128.

What we collect

• When you book: your name, email address, phone number, billing postcode, the number of guests, your estimated arrival time, anything you write in the notes, and the access code for the property, which we send to you and to no one else.
• When you pay: confirmation from Stripe that a payment succeeded, the amount, and the card brand and last four digits. We never see or store your full card number, expiry or security code.
• If you create an account: your password, stored only as a one-way hash, and your communication preferences.
• If you use the income calculator: the postcode and size of your property, your email address and, if you ask us to call, your name and phone number.
• If you write to us: the message and our reply.
• When you pay with a wallet or Link: if you choose Apple Pay, Google Pay or Stripe Link, Stripe holds the email address, phone number and card you saved with it. That account is yours and Stripe's, not ours — we only receive confirmation that the payment succeeded.
• On your device: a session cookie that holds your dates while you book, and a record of your cookie choice kept in your browser. Both are listed in the cookie policy.
• Automatically: your IP address and the pages you visited, used to keep the site working and to stop abuse of the forms.

Why we use it

What for · Lawful basis

• Taking and managing your booking, sending your confirmation, check-in details and receipt — Performance of a contract with you
• Taking payment and making refunds — Performance of a contract
• Keeping accounting records — Legal obligation
• Answering questions and handling complaints — Legitimate interests — running the business and dealing fairly with guests
• Preventing fraud and abuse of the booking and contact forms — Legitimate interests — protecting the business and other guests
• Replying to an income estimate or a request for a call — Steps taken at your request before entering a contract
• Marketing emails about new properties and offers — Consent, which you can withdraw at any time
• Analytics cookies — Consent

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you can object at any time.

Who we share it with

• Stripe, which processes card payments and holds the card data we never see. Stripe is a controller in its own right for some of that; see its own privacy policy.
• Our hosting and email providers, which hold the site and send the emails, acting on our instructions.
• Cleaning and maintenance contractors, who are told the dates of your stay and, where they need it, your first name and phone number.
• Our accountant, for the financial records.
• Booking platforms. We exchange availability with Airbnb and Booking.com so the same night is not sold twice. Only dates go out — no names, no amounts, no contact details.
• Authorities, where the law requires it.

We do not sell personal data and we do not share it for anyone else's marketing.

Where it is held

Our site and database are hosted in [HOSTING LOCATION]. Some of our suppliers, including Stripe, may process data outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by the International Data Transfer Agreement or Addendum approved by the ICO.

How long we keep it

• Booking and payment records: six years after the end of the financial year they fall in, because tax law requires it.
• Your account: until you delete it. Deleting removes your password, phone number and billing postcode, and unlinks your bookings from the account. Your name and email address stay on the booking records we must keep for accounting for six years, after which everything goes.
• Enquiries and estimates: two years, unless they lead to a booking.
• Marketing consent: until you withdraw it.
• Sign-in links: fifteen minutes, then they stop working.

Your rights

You have the right to ask us for a copy of your data; to have it corrected; to have it erased where we no longer need it; to restrict how we use it; to receive it in a portable format; and to object to use we base on legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting what we did before.

Write to stay@idealescapes.co.uk and we will answer within one month. There is no charge.

Marketing

We only send marketing emails if you asked for them. Every one has an unsubscribe link, and you can also change the setting in your account. Unsubscribing does not stop the emails that are part of a booking — your confirmation, check-in details and receipt.

Cookies

Which cookies this site sets and how to change your choice is in the cookie policy.

Security

The site is served over HTTPS. Passwords are stored as one-way hashes and can never be read back, by us or anyone else. Card details never reach our servers. Access to the admin panel is limited to named accounts, is logged, and locks after repeated failed sign-ins.

Children

The site is not aimed at children and we do not knowingly collect their data. A booking is made by an adult; children staying are counted as guests, but we do not ask for their details.

Changes

If we change how we use personal data we update this page and the date at the top. Where the change is significant we will tell account holders by email.

Complaining

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.