1. About This Policy

This Privacy and Cookies Policy (“Policy”) applies to Avari Apartments (“Avari Apartments”, “we”, “us”, “our”).

We are committed to safeguarding your personal data and complying with applicable UK data protection laws, including the UK GDPR and Data Protection Act 2018.

This Policy explains how we collect, use, disclose, and protect your personal data when you:

Visit our website

Make a booking

Stay at one of our apartments

Interact with us

This Policy supplements (but does not replace) our Terms & Conditions.

2. What Personal Data We Collect

We may collect the following categories of personal data:

Information You Provide

Full name, title, date of birth

Contact details (email, phone, address)

Nationality and identification documents

Booking details and preferences

Payment details (limited to secure processing)

Guest details (including additional occupants)

Special requests and communications

Sensitive (Special Category) Data

Only where necessary:

Health or accessibility requirements

Information voluntarily disclosed (e.g. dietary, religious preferences)

Automatically Collected Data

IP address

Device and browser information

Website usage and behaviour

Cookies and tracking data

Information from Third Parties

We may receive data from:

Booking platforms (e.g. Airbnb, Booking.com)

Travel agents or corporate partners

Property owners or landlords

Payment providers

3. How We Collect Your Data

We collect personal data through:

Direct interactions (bookings, enquiries)

Automated technologies (cookies, analytics)

Third-party partners

CCTV systems in communal areas

4. How We Use Your Personal Data

We process your data for the following purposes:

A. Contractual Purposes

Managing bookings and stays

Providing access to apartments

Processing payments

Communicating pre/post stay

B. Operational & Business Purposes

Improving services and guest experience

Internal administration, reporting, and training

Managing relationships with property owners and partners

C. Safety & Legal Compliance

Identity verification

Fraud prevention

Compliance with legal obligations

Security monitoring (including CCTV)

D. Marketing & Personalisation

Sending offers and updates (with consent)

Tailoring content and services

Analysing preferences and behaviour

Legal Basis for Processing

We rely on:   

Contract performance

Legal obligations

Legitimate interests

Consent (for marketing and cookies)

5. Sharing Your Personal Data

We may share your data with:

Payment providers (e.g. Stripe, Barclays)

Service providers (housekeeping, maintenance, concierge)

Technology and hosting providers

Marketing and analytics partners

Property owners or landlords

Hotel or accommodation partners

Legal and regulatory authorities

Where data is shared with third parties, they act as independent controllers or processors under their own privacy policies.

6. CCTV & Security

We use CCTV in communal areas (entrances, hallways, shared spaces) for:

Guest safety

Property security

Incident investigation

No CCTV is installed inside apartments

Footage may include audio where applicable

Recordings are retained for up to 90 days

7. Data Retention

We retain personal data:

Typically for 7 years after your last stay

Longer where required for legal or regulatory purposes

After this period, data is securely deleted or anonymised.

8. Cookies & Tracking Technologies

We use cookies to:

Ensure website functionality

Analyse performance and usage

Personalise content and marketing

Types include:

Necessary cookies

Analytics cookies

Marketing cookies

Functional cookies

You can manage preferences via your browser settings.

9. Data Security

We implement industry-standard security measures including:

Secure servers and encryption

Access controls based on roles

Third-party data protection safeguards

However, no system is completely secure, and data transmission is at your own risk.

10. International Data Transfers

Your data may be transferred outside the UK/EEA.

Where this occurs, we ensure:

Appropriate safeguards

Legal transfer mechanisms

Equivalent data protection standards

11. Your Rights

You have the right to:

Access your data

Correct inaccurate data

Request deletion

Restrict or object to processing

Withdraw consent

Request data portability

You can exercise these rights by contacting us.

12. Accuracy of Information

You are responsible for ensuring that the personal data you provide is accurate and up to date. Please notify us of any changes.

13. Children & Minors

Our services are not intended for individuals under 18.

We do not knowingly collect data from minors without parental consent.

14. Payment Processing

Payments are handled securely via third-party providers such as:

Stripe

Barclays

Their privacy policies apply to payment processing.

15. Changes to This Policy

We may update this Policy periodically. Updates will be posted on our website and, where appropriate, notified to you.

16. Contact Us

If you have any questions or requests regarding this Policy: