Legal

Privacy Policy

How Cosy Key Stays handles the personal information you give us, what we do with it, and the rights you have over it.

Note: This policy is a starting point drafted for the website. Please review it against how the business actually handles data — including your registered company details and ICO registration number — before publishing.

Last updated: July 2026

Who we are

Cosy Key Stays provides serviced accommodation, HMO room lettings and cleaning services across Greater Manchester. For the purposes of UK data protection law we are the data controller for the personal information described in this policy.

You can reach us about anything on this page at hello@cosykey.co.uk.

What we collect

We collect only what we need to answer you and run a booking:

  • Enquiry details — your name, email address, phone number, the dates and area you asked about, and whatever you write in the message box.
  • Booking details — where a booking goes ahead, the information needed to complete it, including billing details and, for HMO lettings, referencing and right-to-rent documentation as the law requires.
  • Correspondence — emails and messages you send us, kept so we have a record of what was agreed.

We do not knowingly collect information from children, and we do not buy contact lists.

Why we use it, and our lawful basis

  • To reply to your enquiry — our legitimate interest in responding to someone who has contacted us.
  • To provide a stay or a service — performance of the contract between us.
  • To meet legal obligations — including right-to-rent checks, HMO licensing requirements, tax and accounting records.
  • To improve the website — our legitimate interest in understanding, in aggregate, how the site is used.

We do not send marketing emails unless you have asked us to, and any that we do send will always have a working unsubscribe link.

Who we share it with

We do not sell your data. We share it only where it is necessary to deliver what you have asked for:

  • Our own cleaning and maintenance teams, where they need access details
  • Payment providers, to take and process payment securely
  • Referencing providers, for HMO lettings, and insurers or loss adjusters where they are arranging and paying for your stay
  • Our accountants and professional advisers
  • Law enforcement or regulators where we are legally required to

How long we keep it

Enquiries that do not become bookings are kept for up to 24 months, so we can pick up the conversation if you come back to us.

Booking and financial records are kept for six years after the end of the relevant tax year, as UK tax law requires. Tenancy and licensing records are kept for as long as the relevant legislation requires.

Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the personal data we hold about you
  • Have inaccurate information corrected
  • Ask us to delete data we no longer need to keep
  • Object to or restrict how we use it
  • Ask for your data in a portable format
  • Withdraw consent, where consent is what we relied on

Email hello@cosykey.co.ukand we will respond within one month. If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

This website is served over HTTPS, and enquiry data is transmitted encrypted. Access to booking records is limited to the people who need it to do their job. No system is perfectly secure, but we take the protection of your information seriously and will tell you promptly if anything goes wrong that affects you.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised, and material changes will be highlighted here.

Questions about any of this?

If anything here isn't clear, or you want to exercise a right described above, get in touch and we'll deal with it.

Or email us directly at hello@cosykey.co.uk