Privacy notice

Last updated: 24 September 2026

This notice explains what personal information Perfect Booking collects, why we use it, who we share it with, how long we keep it and the rights you have. It covers people who use this website, guests who stay in homes we manage, landlords and owners, estate agents and business clients.

1. Who we are

Perfect Booking Ltd is the data controller for the personal information described in this notice. We're a company registered in England and Wales, company number 15780729, registered office 20 Wenlock Road, London, England, N1 7GU. We're registered with the Information Commissioner's Office, registration number [ICO number].

For anything about your personal information, email hello@perfectbooking.co.uk, call 0330 124 5672 or write to us at our registered office.

When you book through Airbnb, Booking.com or another booking platform, that platform is also a controller of your information and its own privacy notice applies to what it does with it.

2. What we collect

Website visitors

• Forms you fill in: the details you give us in the earnings assessment, contact, business stay, insurance placement, estate agent and partner forms. This usually means your name, email, phone number, the property or stay you're asking about, and your message.
• Referrals: an estate agent may give us a landlord's name, contact details and property postcode. The agent must confirm the landlord has agreed to this before sharing.
• Technical information: your IP address, browser and device type, and the pages you request. Our hosting provider records this to run and protect the site. We also use your IP address for a short time to limit repeated booking and discount-code attempts.
• Information saved on your device: the earnings assessment saves your answers in your own browser so you can pick up where you left off. This stays on your device until you finish or clear it.

Guests

• Booking details: your name, email, phone number, dates, number of guests and pets, the home you've booked, the price, and any messages or requests.
• Payment: Stripe processes your card. We receive confirmation of payment, the card type and last four digits, and the billing name and postcode. We don't receive or store your full card number or security code.
• Identity and security checks: before check-in we may ask the lead guest for a photo of their ID and a selfie, and run checks designed to prevent fraud, unauthorised parties and misuse of our homes. See section 4.
• Your stay: check-in and check-out times, access code use, issues you report, reviews you leave, and any damage, cleaning or incident records.
• Bookings through a platform: the information the platform shares with us, usually your name, dates, number of guests and a contact route.

Landlords and owners

• Your name, contact details, property details, bank details for payouts, the information we need to meet our legal duties (for example proof of ownership or permission to let, safety certificates and insurance), and records of bookings, income, costs and statements.

Estate agents and business clients

• Your name, job title, company, contact details, the referrals or bookings you make, and invoicing details.

3. How we use it, and our legal reasons

Data protection law requires us to have a lawful reason for each use. Ours are:

• To take and manage bookings, and look after guests during their stay. Needed to perform our contract with you.
• To take payments, and charge for damage or amounts owed under our booking terms. Needed to perform our contract, and in our legitimate interest in recovering what we're owed.
• To prepare earnings estimates, reply to enquiries and follow up referrals. Steps you've asked us to take before a contract, and our legitimate interest in running and growing the business.
• To manage homes for owners and pay them. Needed to perform our management agreement.
• To verify identities, prevent fraud, protect our homes, neighbours and guests, and enforce our booking terms and house rules. Our legitimate interest in keeping homes and people safe. Where a check uses biometric data (see section 4), we rely on your explicit consent.
• To handle complaints, disputes, chargebacks, insurance claims and legal claims. Our legitimate interest in establishing, exercising or defending legal claims.
• To keep financial and tax records, and respond to lawful requests from authorities. Our legal obligations.
• To run, secure and improve this website and our systems. Our legitimate interest in providing a working, secure service.
• To send you news and offers by email. Only with your consent, or where you're an existing client and haven't opted out. Every email has an unsubscribe link.

Where we rely on legitimate interests, we've balanced them against your rights and expectations. You can ask us for details of that balance.

4. Guest identity verification

• Before check-in we may ask the lead guest to verify their identity through our verification provider, SuiteOp. This usually involves a photo of a government-issued photo ID and a selfie, which are compared to confirm they match. The check may also look for signs of fraud or risk linked to the booking.
• Comparing your face with your ID uses biometric data, which is special category data. We only do this with your explicit consent, which you give during the check. If you'd rather not use the selfie check, contact us before your stay and we'll discuss another way to confirm your identity, such as showing your ID in person.
• We use the results only to decide whether a booking can go ahead safely and to deal with any incident linked to the stay. A person reviews any booking the check flags before we decide not to go ahead. We don't make decisions about you based solely on automated processing.
• ID images and selfies are deleted once they're no longer needed. See section 7.

5. Who we share it with

We never sell your personal information. We share it only where needed, with:

Service providers who work for us

These providers act on our instructions under contracts that require them to keep information secure and use it only for us:

• Guesty: property management and booking system, which holds bookings, guest messages, calendars and owner records.
• SuiteOp: guest identity verification, guest screening, smart-lock and access code management, and automated guest messages.
• Host OS: our own property management platform and guest portal, which will hold booking, guest and owner information for the same purposes as Guesty once it's in use.
• Stripe: card payments, refunds and payment disputes. Stripe also uses payment information to prevent fraud, as an independent controller.
• Calendly: booking calls and meetings with us.
• Vercel and Upstash: website hosting, and storage for form submissions and security limits.
• Google: email and documents, and the web fonts used on this site.
• OpenStreetMap: the map tiles shown on our search and property pages. Your browser requests these directly, which shares your IP address with the map provider.
• Cleaning, maintenance and linen teams: the booking details they need to prepare and look after the home, such as dates, guest numbers and access information.

Others

• Home owners: booking details for their home, such as dates, guest numbers, the price and any damage or incident reports, so they can see how their home is used.
• Booking platforms: such as Airbnb and Booking.com, for bookings made through them.
• Insurers, loss adjusters and claims handlers: where there's damage, an incident or an insurance placement.
• Your card provider: the information needed to respond to a chargeback or payment dispute, as set out in our booking terms.
• Our accountants, auditors and professional advisers.
• The police, local authorities, HMRC, courts and regulators: where the law requires it, or where needed to prevent crime, protect people or property, or deal with legal claims.
• A buyer or investor: if all or part of our business is sold or restructured, under the same protections as this notice.

6. International transfers

Some of our providers store or access information outside the UK, including in the European Economic Area, Israel and the United States. When information leaves the UK, we make sure it's protected by one of the following:

• UK adequacy regulations, which cover the EEA and Israel.
• The UK Extension to the EU-US Data Privacy Framework, where the US provider is certified.
• The UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

You can ask us for more detail about the safeguards for a particular provider.

7. How long we keep it

We keep information only for as long as we need it, then delete or anonymise it:

• Assessments and enquiries that don't lead to a contract: 2 years from our last contact with you.
• Guest booking and payment records: 6 years after the end of the stay, for tax, accounting and legal claims.
• ID images and selfies from verification: no longer than 30 days after check-out, or after we decide not to go ahead with the booking. If there's an incident, damage or a dispute linked to the stay, we keep what's needed until it's resolved. The result of the check (passed or not) is kept with the booking record.
• Records of damage, incidents, complaints and disputes: 6 years after they're resolved.
• Owner and client records: for the length of our agreement, then 6 years.
• Estate agent and referral records: for as long as we work together, then 6 years for any referral payments.
• Calls booked through Calendly: 2 years.
• Email marketing: until you unsubscribe. After that we keep only your email address on a suppression list, so we don't contact you again.
• Security limits on booking and discount-code attempts: your IP address is held for up to 1 hour.
• Website hosting logs: kept by our hosting provider for a short period for security and troubleshooting, in line with its own retention settings.

8. Cookies and similar technologies

• We don't use advertising or analytics cookies on this website.
• Our checkout uses Stripe, which sets cookies that are strictly necessary to process payments securely and prevent fraud.
• The earnings assessment stores your answers in your own browser, as described in section 2.
• If we add analytics or other non-essential cookies in future, we'll ask for your consent first and update this notice.

9. How we protect your information

• This website uses encrypted connections (HTTPS). Payments are processed by Stripe and card details never reach our systems.
• Access to personal information is limited to the people and providers who need it, protected by passwords and, where available, two-step sign-in.
• We choose providers with strong security and check their data protection terms.
• If a data breach is likely to put your rights at risk, we'll tell you and the Information Commissioner's Office as the law requires.

10. Your rights

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that's wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use your information
• object to how we use your information where we rely on legitimate interests, and object to direct marketing at any time
• ask us to move information you've given us to another provider
• withdraw your consent at any time, where we rely on it, without affecting what we did before

Some rights have limits. For example, we may need to keep booking and payment records for tax purposes, or keep information needed for a legal claim. If we can't do what you ask, we'll explain why.

To use your rights, email hello@perfectbooking.co.uk. We may need to confirm your identity first. We'll respond within one month, and there's usually no charge.

11. Children

Our website and booking service are for adults. The lead guest on a booking must be 18 or over. We only hold information about children where a parent or guardian gives it to us as part of a booking, such as the number of children staying.

12. Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

13. Changes to this notice

We'll update this notice when our services or the law change, and show the date of the latest version at the top. If we make a significant change that affects you, we'll tell you directly.