Privacy Policy

Version 1.0 · Effective 21 July 2026

1. Who we are

This Privacy Policy explains how FindStayGo (“we”, “us”, “our”) collects, uses and protects personal data when you use our website and services (the “Service”).

FindStayGo is a trading name of Hostinspired Limited (company number 16795183), registered office: Vernon House, 40 New North Road, Huddersfield, West Yorkshire, England, HD1 5LS. For UK GDPR purposes, Hostinspired Limited is the data controller.

Privacy questions and data-rights requests can be sent via our contact form.

2. Personal data we collect

Depending on how you use the Service, we may collect:

• Account data - name, email address, password (stored as a hash), and verification status for guest or host accounts.
• Host business data - company/brand name, website URL, domain verification details, listing information and related audit events.
• Guest activity - saved favourites and related account preferences.
• Communications - messages you send via the contact form or support emails, including metadata needed to respond.
• Technical data - IP address, browser/user agent, device and approximate location derived from IP, pages visited, and diagnostic logs.
• Cookies and similar technologies - as described in our Cookie Policy, including analytics cookies where you consent.
• Public listing data - publicly available property information processed to power search and discovery (this may include business contact details published by hosts on their own websites).

3. How we use personal data and lawful bases

We use personal data to:

• provide and operate the Service, including accounts, favourites, host listing tools and email verification (contract / steps prior to contract);
• secure the Service, prevent abuse, and maintain logs (legitimate interests);
• improve search relevance, listing enrichment and product quality using automated processing and AI-assisted tools (legitimate interests);
• respond to enquiries and rights requests (legitimate interests / legal obligation where applicable);
• measure site usage with Google Analytics where you consent (consent);
• comply with legal obligations and defend legal claims (legal obligation / legitimate interests).

We do not use personal data for automated decision-making that produces legal or similarly significant effects about you without human involvement.

4. Service providers (processors)

We use trusted providers to help run the Service. Key processors include:

• Hosting UK - website and application hosting;
• SMTP2GO - transactional email delivery (for example verification and password-reset emails);
• Google Analytics - website analytics (only where analytics cookies are allowed);
• OpenRouter and OpenAI - AI model access used for search understanding and related enrichment features;
• Deepgram - speech-to-text processing for voice search;
• bunny.net - storage and content delivery for media assets such as listing images.

These providers process data on our instructions and under appropriate contractual safeguards. We do not sell personal data.

5. International transfers

Some providers may process data outside the United Kingdom. Where that happens, we use appropriate safeguards required by UK data protection law (such as the UK International Data Transfer Agreement / Addendum or adequacy decisions), unless an exemption applies.

6. Retention

We keep personal data only as long as needed for the purposes above, including account operation, security, legal compliance and dispute handling. Typical examples:

• account data - while the account remains open, then for a limited period afterwards for security and legal reasons;
• contact form messages - for as long as needed to handle your enquiry and related follow-up;
• server and security logs - for a limited operational period;
• analytics data - according to our analytics configuration and your cookie choices.

7. Security

We take reasonable technical and organisational measures to protect personal data, including encrypted connections, hashed passwords, access controls and least-privilege practices. No online service can guarantee absolute security.

8. Your rights (UK GDPR)

You may have the right to:

• access your personal data;
• rectify inaccurate data;
• erase data in certain circumstances;
• restrict or object to certain processing;
• data portability for data you provided to us where processing is based on consent or contract and is automated;
• withdraw consent where processing is based on consent (for example non-essential cookies), without affecting prior lawful processing.

To exercise these rights, use our contact form. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us so we can delete it.

10. Cookies

We use cookies and similar technologies as explained in our Cookie Policy. Non-essential cookies (including Google Analytics) are used only with your consent via our cookie banner.

11. Third-party websites

Listings and other pages may link to external websites. Those sites have their own privacy practices. We are not responsible for them.

12. Changes to this policy

We may update this Privacy Policy from time to time. The version and effective date appear at the top of this page. Significant changes will be reflected here; where appropriate we may also notify account holders.

13. Contact

For privacy enquiries, contact us via /contact.