Privacy Policy

Last updated: 2 August 2026

1. Who we are

bookmystay.direct is operated by Lavndr Living, S.L. ("we"), the data controller for your owner account, incorporated in Spain. Contact: hello@lavndrliving.com.

2. What we collect

Account data (email, your name or business name, credentials handled by our auth provider); the content you add to your booking page (property details, photos, prices, calendar links); subscription/billing metadata from Stripe (we never see or store full card numbers); and guest enquiry data submitted through your page (guest name, email, phone, dates, message).

3. Guest data & your role

When a guest sends an enquiry we pass their details to you, the owner. From that point you are the controller of that guest's data and responsible for using it only to respond to their enquiry and in line with privacy law.

4. How we use data

To provide and secure the Service, create and display your booking page, process your subscription, sync any calendars you connect, send transactional email (enquiries, account and billing notices), and comply with law. Legal bases (GDPR): performance of our contract with you, our legitimate interests in running and securing the Service, consent where required, and legal obligation.

5. Who we share with

Providers acting on our instructions: Stripe (payments), our email provider (transactional email), and the calendar sources you connect. We don't sell your data or use it for advertising.

6. International transfers

Where data is processed outside the EEA/UK we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

7. Retention

We keep account and page data while your account is active and for a reasonable period afterwards, then delete or anonymise it unless a longer period is required by law.

8. Your rights

Subject to law you can access, correct, export, restrict or delete your data and object to certain processing. Email hello@lavndrliving.com. EU/UK users may also complain to their data protection authority.

9. Security

We use reasonable technical and organisational measures to protect your data; no system is perfectly secure.

10. Changes

We'll post material changes here and, where appropriate, notify you.