Privacy Policy

Last updated: May 2025

We are dedicated to safeguarding and preserving your privacy when visiting our website or communicating electronically with us.

This privacy notice (‘Notice’) provides an explanation about what happens to any Personal Data that you provide to us, or that we collect from you.

By continuing to use our Website and services, which includes the booking of our services through our Website (‘Services’), you agree to our Terms and Conditions as made available on our Website and this Notice for the collection and processing of your Personal Data.

This Notice sets out our use of any and all Personal Data collected by us in relation to your use of our website, www.tailoredstay.co.uk (‘Website’). The Website is operated by Morgan Caruba Limited trading as Tailored Host (‘Tailored Host’, ‘we’, ‘us’, ‘our’, ‘ourselves’) as well as Morca Relocations Limited trading as Tailored Stay, both companies represented by the same owners (collectively ‘the Companies’).

For the purposes of processing your Personal Data, we are the Data Controller (as defined under Article 4(7) of the EU General Data Protection Regulation 2016/679 (‘GDPR’) as well as the UK GDPR (the retained EU law version of the General Data Protection Regulation ((EU) 2016/679), as it forms part of the law of England and Wales, Scotland, and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018). 

Personal Data shall have the meaning given to it under Article 4(1) of the GDPR 2016/679, and the UK GDPR, and which is more particularly defined in this Notice below.  

This Notice should be read in conjunction with our Terms and Conditions. We may amend or update this Notice from time to time and will publish revised versions on our Website. We reserve the right to alter and make changes to this Notice at our sole discretion and we therefore request all users to regularly refer to our Notice for updates and variations.

The contents of this Notice are as below: 

• Who is the person responsible for the management of your Personal Data? 
• Policy Statement
• What Personal Data do we need/receive?
• What Special Category Personal Data do we need/receive?
• What are the sources of collection of your Personal Data? 
• How do we use your Personal Data?
• Children’s Privacy 
• What are the Lawful Bases for processing your Personal Data?
• What are the Lawful Bases for processing your Child’s Special Category Personal Data?
• Who may use your Personal Data?
• Social Media
• Doorbell Cameras
• How do we store and transfer your Personal Data?
• For how long do we store your Personal Data? 
• Use of Cookies
• Marketing Communications
• Transfer of your Personal Data outside of the European Economic Area
• Changes in Terms of Privacy 
• Third party Links 
• Payments 
• Website Hosting and Back-end Infrastructure
• Access to Personal Data 
• Erasure of your Personal Data
• Your Rights in relation to your Personal Data
• Further Information on your rights in relation to your Personal Data as an individual 
• Your right to object to the processing of your Personal Data for certain purposes
• Contacting Us

Who is the person responsible for the management of your Personal Data?

Morgan Caruba Limited trading as Tailored Host as well as Morca Relocations Limited trading as Tailored Stay, both companies represented by the same owners are jointly responsible for the management of your Personal Data. Morgan Caruba Limited is a private company limited by shares and registered with the Companies House in the United Kingdom under number SC755754, and with its registered office address at Unit 2a, Pavilion 2 Castlecraig Business Park, Players Road, Stirling, Stirlingshire, United Kingdom, FK7 7SH.  It specialises in the buying and selling of owned real estate and the letting of owned or leased real estate. Morca Relocations Limited is a private company limited by shares and registered with the Companies House in the United Kingdom under number 10925679, and with its registered office address at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. It specialises in the letting and operating of its own or leased real estate, as well as in the management of real estate on a fee or contract basis.

As businesses operating in the United Kingdom, both the Companies are registered with the Information Commissioner’s Office (ICO) under the following reference numbers:

Morgan Caruba Limited- ZB17360 

Morca Relocations Limited- A8219852

The person responsible for data protection is Nicola Morgan. For any queries relating to the management of your Personal Data please do not hesitate to send us an email at contact@tailoredstay.co.uk. 

Policy Statement

As a Data Controller (as defined below), Morgan Caruba must collect and use certain types of information about individuals with whom it interacts. These may include for example, current, past and prospective clients, suppliers, third-party service providers, employees, contractors, consultants and others with whom we communicate. In addition we may be required to collect and use certain information in order to ensure safety, and to comply with legislative requirements. 

Data Controller shall have the meaning given to it in Article 4(7) of the GDPR and the UK GDPR respectively, i.e. ‘‘controller’ means the natural or legal person, public authority, agency or other body, which alone, or jointly with others, determines the purposes and means of the processing of Personal Data.’ 

We will collect and process all Personal Data in accordance with Applicable Data Protection Law (as defined below), irrespective of the manner and format in which Personal Data is collected by us, including without limitation as paper copies, computer records, datasets and Personal Data held within applications and/or otherwise on different devices. 

Details of how we collect, and process Personal Data are outlined in this Privacy Notice. 

What Personal Data do we need/receive?

‘Personal Data’ has been defined under the GDPR and the UK GDPR as ‘any information relating to an identified or identifiable natural person (‘Data Subject’)’. ‘An identifiable natural person is one who can be identified, directly or indirectly, in particular, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.’ 

Any references to ‘Personal Data’ in this Notice therefore means information about living individuals, which, alone or in conjunction with other information held by us is capable of identifying them. The GDPR 2016/679, the UK GDPR, The Data Protection Act 2018 and any other national implementing legislation relating to data protection in the UK, regulate our use of your Personal Data (collectively ‘Applicable Data Protection Law’). 

In order to provide our services or for the purposes of conducting our business we may need the following Personal Data from the individuals we are dealing with. (We have tried to cover categories of data that we generally require while providing services to our clients or for operating our business. However, this is not an exhaustive list).

• your name
• your date of birth
• sensitive information such as your medical/health information 
• details of your ‘emergency contact’
• your physical and/or electronic address
• your phone number
• for the purposes of making payments, bank, or debit/credit card details
• details of your visits to our Website and the resources that you access, including, but not limited to, traffic data, location data, weblogs and other communication data
• any other information that you provide by filling out forms on our Website or otherwise, such as when you register for information or book our services
• your social media account details if you follow us on or communicate with us via social media
• any other information provided to us when you communicate with us for any reason

if we receive information about a child below 18 years of age (‘Child’ and ‘Children’ will be construed accordingly), the Child’s parent or guardian will be responsible for their Child’s Personal Data that they share with us.  We do not actively collect Children’s Personal Data, unless it is necessary to do so,  but may be in receipt of it, if you provide it to us. Please note that as a parent or guardian you are responsible for your Child’s Personal Data and the consequences of sharing it. We encourage you not to share your Children’s Personal Data where it is not necessary to do so. 

What Special Category Personal Data do we need/receive?

Special Category Personal Data refers to Personal Data that is more sensitive, and therefore requires more protection and additional reasons for its processing. 

In order to provide our services within a safe environment where the health and well-being of our clients, particularly any minors/Children accompanying our clients are prioritised, as well as for the purposes of conducting our business we may need the following Special Category Personal Data regarding you and/or your family members, including your Child, as the case may be (as defined below in this Notice). This may include without limitation: 

• information about your or your guests’/family members’ including your Child’s health, including without limitation, any allergies, medical/health conditions or special needs 

(We have tried to cover categories of Special Category Personal Data that we generally require while providing services to our clients or for operating our business. However, this is not an exhaustive list).

What are the sources of collection of your Personal Data?

We may obtain Personal Data from you when you contact us or get in touch with us via our Website or social media accounts or when you, or your organisation correspond with us through any means of communication. This includes Personal Data you provide to us when you:

• complete our booking form for us to provide our services to you. This will include Personal Data about you and/or other guests accompanying you, and that is necessary for us to use to secure the booking of your stay. 
• contact us with a query via our Website, email, telephone, or social media 
• ask us to collaborate with you on any assignment
• contact us or authorise anyone to contact us for the purposes of our services
• contact us to provide us your services or goods
• correspond with us to submit any complaints that you may have
• correspond with us to address any complaints we may have raised
• register for a seminar or event where information is shared between fellow members
• register to receive updates and newsletters from us
• provide us and/or our staff with your personal information, business cards or contact details
• deal with us when we are providing services to our clients (which may be you, your dependent, your organisation or a third party)
• submit identity documents directly to us or to third party agencies commissioned by us to collect your Personal Data for the purposes of carrying out identity checks and due diligence (We shall continue to remain the Data Controller for any Personal Data submitted to third parties in connection with your dealings with us)
• contact us for the purposes of employment or apprenticeships and
• connect with us on social media platforms or join groups created and administered by us on social media.
• communicate with us via messaging platforms such as WhatsApp, Facebook Messenger, Twitter, or Instagram Direct Messenger

We may also collect and retain Personal Data:

• obtained from public sources about you or your organisation, which includes all information available on your website, the Companies House, or other online sources accessible through search engine optimisation searches
• obtained from third parties, that may include our clients, professional regulators, public bodies, and other entities, including providers of analysis, screening and database services who have a right to disclose this information to us and
• relating to whether our contacts read electronic correspondence from us or click on links we send them.

How do we use your Personal Data?

The Personal Data that we collect and store relating to you is primarily used to enable us to provide our services to you. In addition, we may use your Personal Data for the following purposes:

1. to provide you with information requested from us, relating to our services. (We will keep this until you tell us to remove your and/or your family members’ including your Child’s Personal Data from our records for these purposes, or until we have reason to believe that you may no longer have any need for this information and our services)
2. to meet our contractual commitments to you when you book a stay with us 
3. to notify you about any changes to our Website, such as improvements, or service changes, that may affect our services
4. to carry out research, including market research, statistical research on site traffic, sales and other commercial information to assist us in improving the services we provide to you and to improve our Website
5. for internal use such as governance, quality control and monitoring purposes
6. if you are an existing client, we may contact you with information about services similar to those that were the subject of a previous sale to you
7. to send you newsletters and other promotional material if you have opted-in
8. to connect with you on social media, if you have requested to connect with us and, once connected, to provide you with information and updates about us and our services on social media

Where we have obtained Personal Data for any of the purposes set out in this Notice, we may use it in connection with internal data analysis and also for any of the other purposes set out in this Notice. This does not affect your legal right to object to the use of your Personal Data for direct marketing purposes.

Children’s Privacy

We only intend to collect and process the Personal Data of anyone under the age of 18 (eighteen) years old (‘Child’/’Children’) if it is submitted by a parent or guardian for the provision of the services as detailed on our Website. When you submit the Personal Data of a Child on our Website or otherwise, you agree that you have the right to do so as their parent or guardian. 

If you are a parent or guardian and you are aware that your Child has provided us with Personal Data without your consent, please contact us at the earliest. Unless contacted by a parent or legal guardian, we have no way of knowing that Personal Data was submitted by a Child without parental consent. As a parent/legal guardian you understand that the onus of controlling your Child’s Personal Data lies on you. If we become aware, after notification by a parent/legal guardian or the Child themself, that Personal Data from the Child was submitted to us without parental/legal guardian’s consent, we will take steps to remove the Child’s Personal Data from our servers. 

We will not share a Child’s Personal Data with a third-party unless we have a compelling reason to do so, where a Child’s best interests are our primary consideration. For example where it is in the best interests of a Child’s health and safety and/or security for their Personal Data to be shared. In particular we will follow the ICO’s guidance on sharing information to safeguard children.

What are the Lawful bases for processing your Personal Data?

The following are the lawful bases for us processing your Personal Data:

• Article 6.1 (a) of the GDPR 2016/679 and the UK GDPR- Consent

In order to avail of our services, you consent to us obtaining and processing your Personal Data as well as the Personal Data of your Child if applicable. While dealing with you we may issue terms and conditions (‘Terms of Business’) or execute a contract outlining the terms and conditions of our engagement with you. The Terms of Business/contract along with this Notice set out the purposes for which your and/or your family members’ including your Child’s Personal Data may be obtained and processed by us. By accepting the Terms of Business or by using our Website or by executing a contract with us and by continuing to deal with us you confirm that you have consented to us collecting and processing your, and/or your Child’s Personal Data in accordance with our Terms and this Notice. 

By expressly opting in to receive our newsletters and promotional material, you consent to us using your email address for the said purposes, in which case the lawful basis for us using your Personal Data is your consent as outlined in Article 6.1 (a) of the GDPR 2016/679, and the UK GDPR.

‘Consent’ as defined under Article 4(11) of the UK GDPR means any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her. Therefore where you opt-in for us to contact you or voluntarily request for our services, you consent to us using your Personal Data to fulfill the requests made by you. 

• Article 6.1 (b) of the GDPR 2016/679 and the UK GDPR- Contractual necessity

One of the grounds for obtaining and processing your and your family members’ including your Child’s Personal Data is so that we can perform our services in line with the Terms of Business mutually agreed to by us. This includes the collection and use of your and/or your family members’ and/or Child’s Personal Data in order for us to deliver our services to you.

1. Article 6.1 (c) of the GDPR 2016/679 and the UK GDPR- Compliance with legal obligations

We may have to collect and process Personal Data, where such processing is necessary for compliance with a legal obligation to which we as the Data Controller are subject. In order to comply with certain legislative and regulatory requirements relating to client due diligence, we may have to collect and process your Personal Data. Consequently, we may process your Personal Data to carry out identity checks and maintain records of client due diligence.

We may employ third party service providers for the purposes of carrying out client identity checks, or for processing your Personal Data for the purposes of due diligence. However, we remain the Data Controllers. 

• Article 6.1 (f) of the GDPR 2016/679, and the UK GDPR- Legitimate interests

In circumstances where you are a client or an employee of or independent contractor for Morgan Caruba Limited, we may have to process your Personal Data to promote and pursue legitimate interests of the public and/or our organisation, and/or yours as our client or employee/independent contractor.

In terms of promotional material, if you unsubscribe from our mailing list or revoke your consent to receive our newsletters and promotional material, the corresponding Personal Data will be removed from our mailing list and will no longer be processed for these purposes. Including your email address in our blocking list is effected in order to safeguard our legitimate interests under Article 6.1 (f) of the GDPR 2016/679, and the UK GDPR. Our legitimate interests lie in not sending you any e-mails in the future.

What are the Lawful Bases for processing your and/or your Child’s Special Category Personal Data?

In addition to one of the lawful bases contained in Article 6 of the GDPR and the UK GDPR, the following are the lawful bases for us processing your and/or your Child’s Special Category Personal Data:

• Article 9.2 (a) of the GDPR 2016/679, and the UK GDPR- Explicit consent 

In order to provide our services to you, and/or your Child, we require your consent to process Personal Data about you and/or your Child as the case may be that comes under ‘Special Category Personal Data’. This includes but is not limited to Personal Data relating to your and/or your Child’s health conditions, and special needs in order to ensure that we can make suitable arrangements for you, for example, if you need a property with wheelchair access or a lift. 

By providing Special Category Data to us you consent to us using your and/or your Child’s Special Category Data including Health data for the above-mentioned purposes, in which case the lawful basis for us using your and/or your Child’s Personal Data is your explicit consent as outlined in Article 9.2 (a) of the GDPR 2016/679, and the UK GDPR.

‘Health data’ as defined under Article 4(15) of the UK GDPR means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.

• Article 9.2 (c) of the GDPR 2016/679, and the UK GDPR- Vital interests

Processing is necessary to protect the vital interests of the Data Subject or of another natural person where the Data Subject is physically or legally incapable of giving consent. For example, where such Personal Data has to be shared for emergency medical care, and where you and/or your Child, as the case may be not physically or legally capable of giving consent. In such cases, it shall be deemed that you have consented to us sharing your, your Child’s and/or any other family member’s Personal Data.

However, you can object to us processing your Personal Data, on any of these bases at any time and, if you do so, we will stop processing the Personal Data unless we can show compelling legitimate grounds which override your rights and interests such as, without limitation your own security or health and safety or the security or health and safety of your Child, or the legitimate interest of our organisation and/or the public or that we need the Personal Data to establish, exercise or defend legal claims – see ‘Your rights in relation to your Personal Data’ below.

Who may use your Personal Data?

We may disclose your Personal Data:

• to enforce our policies, to comply with our legal obligations (such as if we are required to disclose your Personal Data under a court order, legal requirement and/or regulatory requirement) or in the interests of security, public interest, or law enforcement in any country where we have entities or affiliates. For example, we may respond to a request by a law enforcement agency or regulatory or governmental authority, including without limitation, customs authorities of a country. We may also disclose Personal Data in connection with actual or proposed litigation, or to protect our property, security, people and other rights or interests
• to our employees, independent contractors, consultants, partners and/or third parties who help deliver our services to you. Examples include hosting our web servers, analysing data, providing marketing and administration assistance, and providing customer service. These companies will have access to your Personal Data as necessary to perform their functions, but they may not use that Personal Data for any other purpose. Our contracts with all third parties processing our clients’ Personal Data shall outline their obligations relating to data protection.
• If recipients of Personal Data are located outside of the UK, not being a country that has received an adequacy decision by the European Commission as regards data protection, we will ensure that we have legally compliant data transfer safeguards in place. 

Social Media

Please remember that when you share information publicly on the Website or on social media platforms, for example a comment on a blog post or within social media groups, it may be indexable by search engines, including Google, which may mean that the information is made public. We therefore encourage you not to publish or share your and/or your Child’s Personal Data on social media platforms.

When you participate in conversations on social media your Personal Data may be visible to members of the concerned social media group and to the public in general. Please note that you participate in social media related activities at your sole discretion, and we shall not be liable for the access and use of your and/or your Child’s Personal Data by third parties via social media, including circumstances, where third parties contact you or initiate a conversation with you, on social media or otherwise, as a result of your Personal Data being made available to them via our social media groups or any activity you participate in through our social media platforms or by connecting with us on social media.

Also please note you may be tracked by X, LinkedIn, Instagram (Meta), WhatsApp, Google or YouTube cookies if you access our profile via these social media platforms. The links to their respective privacy policies have been provided below:

1. X- privacy policy
2. Instagram (Meta)- privacy policy
3. WhatsApp- privacy policy
4. YouTube and Google– privacy policy
5. LinkedIn- privacy policy

Doorbell Cameras

Please note that for the purposes of our guests’ safety and security, we have doorbell cameras installed outside the boundary of the properties managed by us. 

Reason– The reason for installing doorbell cameras is to ensure the safety and security of guests, and to mitigate the risk of susceptibility to crime. All our properties have a signage compliant with Applicable Data Protection Law indicating that a doorbell camera is in use. This is in line with the Applicable Data Protection Law based on rules relating to CCTV cameras. 

Footage– In accordance with the rules, we will ensure that we delete footage regularly or automatically or both. 

Sharing images or recordings– In most cases, and should it be justified, we will provide recordings or images if asked by the person whose image or recording or both, the doorbell camera has captured or if requested by the authorities. 

Your rights– As a data subject you have the following data protection rights in relation to the use of doorbell cameras: 

• you can request a copy of the doorbell camera footage that you’re in from us
• you can request us to delete the footage you are in. However, we recommend that you explain to us as to why you would like us to delete the footage. We shall delete it only if the invasion of your privacy outweighs our interests, the interests of our guests or of the public in general.
• You can object to us using the doorbell camera  (the doorbell camera only captures images of persons entering and leaving our properties). However, we will continue to record you if we have a strong reason to do so, or if our interests or the interests of our guests or of the public in general outweigh the invasion of your privacy. 

Doorbell camera system used– We use the Ring video doorbell and device application that enables us to capture images and videos of people entering and leaving our properties. The privacy policy of Ring can be accessed at https://en-uk.ring.com/pages/privacy. 

How do we store and transfer your Personal Data?

All Personal Data collected by us is stored in a secure manner compliant with the GDPR and the UK GDPR. 

Your Personal Data may also be stored on servers that may not be located in the United Kingdom and/or the European Economic Area (the EEA). Some of our servers may be located in the United States of America. Consequently, when you use our Website to book our services or opt in to receive promotional material your Personal Data may be processed by servers located in the United States of America, with less strict privacy laws and the associated risk of your Personal Data being easily accessible in the United States of America. 

Should you not wish your Personal Data to be processed in the United States of America you must not:

1. opt-in to receive promotional material from us
2. book services via our Website, and/or pay using the payment platforms made available on our Website.

A booking by you of services using our Website and/or using any of the payment platforms on our Website shall constitute your consent to your Personal Data being processed in the United States of America.

We may also transfer Personal Data that we collect from you to locations within and outside of the United Kingdom and the European Economic Area for processing and storing. 

Some of the third parties we may transfer your Personal Data to within the UK and/or within the EEA include:

1. Our accountants for the purposes of book-keeping 
2. Our suppliers
3. Our employees, freelancers, consultants and contractors 

We will transfer your Personal Data and/or that of your Child to a third-party only if it is required by law, or it is necessary to do so in your/your Child’s best interests or for the purposes of performing our services and conducting our business. We will ensure that third parties with whom we share your Personal Data and/or that of your Child are made aware of their obligations relating to confidentiality and data protection.

We may share aggregated anonymised data with third parties in order to monitor our services and to ensure consistent quality and safety relating to the services provided to clients.

By submitting your Personal Data, you agree to this transfer, storing or processing. We will take all reasonable steps to make sure that your Personal Data is treated securely and in agreement with this Notice.

Emails– Emails are sent/received by us on devices that are password protected, and as much as possible in a TLS (Transport Layer Security) encrypted format. In most cases records are retained by us for 12 months after the date of your booking and are then destroyed. However, in certain cases, such as chargeback, we may store your Personal Data for up to 6 (six) years from the date of your booking. 

Security of Personal Data– The transmission of Personal Data via the internet is not completely secure and therefore we cannot guarantee the security of Personal Data sent to us electronically and transmission of such Personal Data is therefore entirely at your own risk. 

Sharing Personal Data for marketing purposes– We may ask you for testimonials and reviews of our services. However, we will also always seek your permission before attributing you in our publicity material such as client testimonials. Please note that by publishing your testimonial or review for us on a publicly accessible platform such as Booking.com, Trust Pilot, Google Reviews, Airbnb and/or other similar platforms, you consent to us reproducing the testimonial in whole or in part on our Website and/or other social media and marketing channels. You agree that separate consent will not be required for us to reproduce your testimonial or review. In the event you do not want us to use your testimonials/reviews on our social media and/or other marketing channels, please inform us by emailing us at contact@tailoredstay.co.uk

Sharing Personal Data in case of emergencies– We will generally share your information/Personal Data with persons nominated as your ‘Emergency Contact’ or where an ‘Emergency Contact’ has not been nominated, with your next of kin only in cases of emergencies where it is in the legitimate interest of the public or in the legitimate interest of our organisation or in your own and/or your Child’s legitimate interest, as the case may be for us to disclose the Personal Data or where your interests (health and safety) and/or those of your family members including those of your Child over-ride our obligation of confidentiality. For such circumstances it shall be deemed that you have consented to your information being shared with the recipient of the information.

Storing Data and Information-All details and Personal Data that you provide to us will be stored securely and will not be shared with third parties except for in circumstances explained in this Privacy Notice. 

For how long do we store your Personal Data?

Our policy is that we retain your Personal Data for as long as it is necessary for the purposes set out in this Notice, or as is required by applicable law. All of the Personal Data is disposed of securely to ensure compliance with Applicable Data Protection Law. Please note that we use third party property management platforms including without limitation, Jurny, Guesty, Booking.com, Airbnb, and other platforms listed in this policy. When you book our services through a third party platform, your Personal Data shall be collected, processed and stored by such third party platforms in accordance with the terms of their respective privacy policies. We recommend you read a third-party platform’s privacy policy and their data retention policy before submitting your Personal Data through the third party platform. 

Use of Cookies

On occasion, we may gather information about your computer for our services and to provide statistical information regarding the use of our Website.

Such information will not identify you personally as it is statistical data about our visitors and their use of our site. This statistical data does not identify any personal details whatsoever.

Similarly to the above, we may gather information about your general internet use by using a cookie file. A cookie is a small text file. Where used, these cookies are downloaded to your computer automatically, typically somewhere within your browser settings files. They help us to improve our Website and your experience of  it.

Examples of Cookies we use: 

Session Cookies. We use Session Cookies to operate our service. Session Cookies are temporary cookies, as they store information about your current session and then are erased when your browser is closed.

Preference Cookies. We use Preference Cookies to remember your preferences and various settings.

Security Cookies. We use Security Cookies for security purposes. 

Other tracking technologies are also used such as beacons, tags, and scripts to collect and track information and to improve and analyse our service. 

All computers have the ability to decline cookies. Our Website will display a pop-up to remind you that when you access our Website, we will place cookies on your device to improve your experience of our Website. We will also give you the option to consent or opt-out of cookies. You can opt-out of cookies by activating the setting on your browser which enables you to decline the cookies. Please note that should you choose to decline cookies; you may be unable to access particular parts of our Website.

Our advertisers may also use cookies, over which we have no control. Such cookies (if used) would be downloaded once you click on advertisements (if any) on our Website or on third-party websites on which our properties may be listed.

We have presence on social media, such as (without limitation) Instagram, and YouTube. Your access of our profile via these social media platforms may result in you and your activities being tracked by the cookies placed by these social media platforms.

We also list our properties on third party platforms such as Airbnb, Booking.com, Jurny, Guesty, Marriott Villas and Homes to name a few. Your access of our properties via the aforementioned and/or similar platforms may result in you and your activities being tracked by the cookies placed by these platforms. 

For more information on Cookie Consent you may also want to visit the UK Information Commissioner’s webpage on cookies: https://ico.org.uk/for-organisations/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/ 

Google Analytics- In order to optimise our service, we may apply Google Analytics and our own statistical analyses.

Google Analytics is a web analysis service provided by Google, which is used for the purposes of market research and ensuring that the service meets user requirements. Google Analytics uses ‘cookies’, which are placed on your computer to make it possible to analyse how you make use of the service. The information generated by the cookies about your use of the service (including your pseudonymised IP address) is as a rule transmitted to and stored by Google on servers in the United States of America. Google uses this information in order to evaluate your use of the service and to create reports on activities for the operator of the service. Google may also transmit this information to third parties if this is prescribed by law, or if third parties process the data on behalf of Google. On no account will Google connect your IP address with other Google data. At https://tools.google.com/dlpage/gaoptout?hl=en-GB  you can, with effect for the future, opt out of the recording and saving of your Personal Data at any time. 

Marketing communications

If you have given permission, we may contact you about any of the following:

• booking information
• occasional information about our services and offers
• updates about our services
• newsletters and other promotional material (if you have opted-in to receiving them) 
• new blog posts

In compliance with Applicable Data Protection Law, all emails sent by us will clearly state who the email is from and will provide clear information on how to contact the sender. In addition, all marketing email messages will also contain concise information on how to unsubscribe from or remove yourself from our mailing list should you wish to, so that you receive no further email communication from us. This is only in relation to communication sent directly by us. You are advised to read a third-party platform’s data protection policy, before opting in to receive newsletters, and other communication from them, as any such communication that you receive from third parties, including without limitation retargeting messaging will be governed by their data protection policy. You should therefore set your subscription preferences separately with each third party platform you use to access our services.  

We are committed to keeping your Personal Data confidential. We will use your email address solely to provide timely information about us and our services and we will maintain the Personal Data you send via email in accordance with Applicable Data Protection Law.

Transfer of your Personal Data outside of the European Economic Area

Your Personal Data may be transferred and stored outside the European Economic Area (EEA) in the circumstances set out in this Notice. Where we are required to do so, we will ensure appropriate safeguards and protections are in place, including undertaking safeguards required to be implemented by the Information Commissioner’s Office such as undertaking a transfer risk assessment, and executing data protection clauses in the form of the International Data Transfer Agreement (IDTA), an International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK Binding Corporate Rules (UK BCRs) as applicable.

Third Party Links

You might find links to third party websites on our Website. These websites should have their own privacy policies which you should check. We do not accept any responsibility or liability for their privacy policies whatsoever as we have no control over them.

You may also find our properties through third-party websites. Please note that we do not host any third-party website and are therefore not in control of how Personal Data provided to or through a third-party website is processed and/or stored by them. 

When you book one of our properties through a third party platform and input your Personal Data on such a platform, you are governed by the platform’s privacy policy. We therefore encourage you to review the privacy policy of the third-party platform before you use the platform to  book our property. 

Some of the third parties that list our properties and facilitate the booking of our properties are as follows. Links to their respective privacy policies have also been provided for ease of reference. 

Guesty – Privacy Policy

Jurny – Privacy Policy

Airbnb – Privacy Policy 

Booking.com – Privacy Policy

VRBO – Privacy Policy

Homeaway (VRBO) – Privacy Policy

OpenRent – Privacy Policy

Plum Guide – Privacy Policy

Marriott Homes and Villas – Privacy Policy

Payments and Accounting Software

In order to enable our clients to book our services, we use third-party services for payment processing (for example, payment processors). 

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your Personal Data is governed by their respective privacy policies. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. 

Some of the payment processors we work with are as follows. Links to their respective privacy policies have also been provided for ease of reference.  

Stripe – Privacy Policy 

Takepayments – Privacy Policy

We use the following software for invoicing, accounting and payroll purposes, as a result of which details of transactions including some of your Personal Data may be inputted in this platform.

QuickBooks (Intuit) – Privacy Policy

Website Hosting and back-end infrastructure

Website Hosting: We use third-party hosting services for the purposes of hosting data and files that enable our Website to run and be distributed as well as to enable us to run specific features and functions within our Website. Whilst we use a UK-based host (SiteGround), it is possible that some of these functions work through geographically distributed servers, thereby making it difficult to identify the exact location where the Personal Data is stored. 

The Morgan Caruba Limited website, i.e., Tailored Host website is hosted by SiteGround. 

The details relating to SiteGround are as below: 

Personal Data collected: various types of Personal Data as specified in this Notice 

SiteGround’s Privacy Policy: https://www.siteground.co.uk/privacy.htm

IT Infrastructure: In order to run our operations, we use several tools and platforms, that form part of our IT infrastructure. These tools are used carefully as we endeavour to reduce the risk of Data Protection breach and cyber security threats. Some of the tools that we use are as listed below. Links to their respective privacy policies have also been provided for ease of reference. 

Google Apps: We use several tools and applications offered by Google such as Gmail, Google calendar, Google Drive, and Google Meets to name a few. The privacy policy that applies to them can be read at Google Privacy Policy. Please note that Google LLC is headquartered in the United States of America, and it is therefore possible that your Personal Data is stored on servers located in the United States. 

Truvi: Truvi is a platform that can be used by property managers to screen guests, carry out identity checks, to organise security deposit collection, short-term rental protection cover as well as damage waiver. Truvi’s privacy policy can be found at: Truvi Privacy Policy

Airtable: Airtable is an applications platform enabling organisations and teams to easily design and deploy flexible and engaging apps to manage data and workflows. Airtable’s privacy policy can be found at: Airtable Privacy Policy. Please note that Airtable, incorporated as Formagrid Inc, is headquartered in the United States of America, and it is therefore possible that your Personal Data is stored on servers located in the United States. 

Slack: Slack is a cloud-based team communication platform. Slack’s privacy policy can be found at: Slack Privacy Policy. Please note that Slack owned by Salesforce Inc., is headquartered in the United States of America, and it is therefore possible that your Personal Data is stored on servers located in the United States. 

Besty AI: Besty AI operated by Bloom Inc. is an Artificial Intelligence driven application for short-term rentals. Besty AI’s privacy policy can be found at: Besty AI Privacy Policy. Please note that Besty AI owned by Bloom Inc., is headquartered in the United States of America, and it is therefore possible that your Personal Data is stored on servers located in the United States. 

Access to Personal Data

The GDPR, UK GDPR and The Data Protection Act 1998 give you the right to access the Personal Data that we hold about you. We will provide the Personal Data that we hold on you free of charge as long as it hasn’t been provided to you already. If the Personal Data is a copy of information already provided or is excessive, then an administration cost of £10 will be charged. Should you wish to receive details that we hold about you please contact us by emailing us at contact@tailoredstay.co.uk. You will need to provide suitable evidence that you are the person that the Personal Data pertains to before we will release it. Personal Data will be provided to you within one month of receipt of your request.

Verifying your identity where you request access to your Personal Data:

Where you request access to your Personal Data, we are required by law to use all reasonable measures to verify your identity before doing so. These measures are designed to protect your Personal Data and to reduce the risk of identity fraud, identity theft or general unauthorised access to your Personal Data.

How we verify your identity:

Where we possess appropriate Personal Data about you on file, we will attempt to verify your identity using that Personal Data. If it is not possible to identify you from such information, or if we have insufficient Personal Data about you, we may require original or certified copies of certain documentation in order to be able to verify your identity before we are able to provide you with access to your Personal Data. We will be able to confirm the precise information we require to verify your identity in your specific circumstances if and when you make such a request.

Erasure of your Personal Data

If you are no longer a client with us, then you have a right to erasure of your Personal Data. Once we have received your request for erasure, we will ensure all Personal Data we hold on you is erased within one month of the receipt of the request unless we are required to retain your Personal Data under a legal requirement.

Your rights in relation to your Personal Data

Subject to certain limitations on certain rights, you have the following rights in relation to your Personal Data, which you can exercise by sending us an email at contact@tailoredstay.co.uk.  

• to request access to your Personal Data and information relating to our use and processing of your Personal Data
• to request the correction or deletion of your Personal Data
• to request that we restrict our use of your Personal Data
• to receive Personal Data which you have provided to us in a structured, commonly used and machine-readable format (for example a CSV file) and the right to have that Personal Data transferred to another data controller (including a third party data controller)
• to object to the processing of your Personal Data for certain purposes (for further information, see the section below titled ‘Your right to object to the processing of your Personal Data for certain purposes’) and
• to withdraw your consent to our use of your Personal Data at any time where we rely on your consent to use or process that Personal Data. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your Personal Data on the basis of your consent before the point in time when you withdraw your consent.
• to prevent us using your Personal Data for direct marketing
• to have (in certain circumstances) inaccurate Personal Data corrected, blocked, or destroyed
• to access a copy of your Personal Data that is undergoing processing (‘subject access rights’)
• to object to automated decisions. We do not, however, use automated decision making
• data portability, which allows you to get and use your Personal Data for different purposes
• a right to object to processing that is likely to cause or is causing damage or distress.

If you want to (1) tell us to stop using your Personal Data or withdraw consent from us processing your Personal Data for any of the purposes mentioned in this Notice (2) exercise your subject access rights (3) tell us about inaccurate Personal Data you think we hold on you or (4) object to a use you believe we’re making of your Personal Data which is causing, or is likely to cause damage or distress, please contact us by emailing  us at: contact@tailoredstay.co.uk. 

In accordance with Article 77 of the GDPR and the UK GDPR, you also have the right to lodge a complaint with a supervisory authority (in the UK, the Commissioner), in particular in the Member State of your habitual residence, place of work  of an alleged infringement of the GDPR.

For the purposes of the UK, the supervisory authority is the Information Commissioner’s Office (ICO), the contact details of which are available here: https://ico.org.uk/global/contact-us/ 

You are entitled to make a complaint at the Information Commissioner’s Office (ICO) https://ico.org.uk/make-a-complaint/ 

The ICO’s address is:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Further information on your rights in relation to your Personal Data as an individual

The above rights are provided in summary form only and certain limitations apply to many of these rights. For further information about your rights in relation to your Personal Data, including any limitations which apply, please visit the following pages on the ICO’s website: 

• https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

You can also find out further information about your rights, as well as information on any limitations which apply to those rights, by reading the underlying legislation contained in Articles 12 to 22 and 34 of the GDPR, which is available here: https://gdpr-info.eu  

Your right to object to the processing of your Personal Data for certain purposes

You have the following rights in relation to your Personal Data, which you may exercise in the same way as you may exercise your rights described above by writing to us at contact@tailoredstay.co.uk.

• to object to us using or processing your Personal Data where we use or process it in order to carry out a task in the public interest or for our legitimate interests, including ‘profiling’ (i.e., analysing or predicting your behaviour based on your Personal Data) based on any of these purposes
• to object to us processing your Personal Data for the exercise of official authority, or for scientific or historical research, or statistical purposes, and
• to object to us using or processing your Personal Data for direct marketing purposes (including any profiling we engage in that is related to such direct marketing)

You may also exercise your right to object to us using or processing your Personal Data for direct marketing purposes by:

• clicking the unsubscribe link contained at the bottom of any marketing email we send to you and following the instructions which appear in your browser following your clicking on that link.

Change in Terms of Privacy

• We reserve the right to alter this Notice. Any changes to this Notice will be posted on this page. This Website is controlled and operated by Morgan Caruba Limited within the United Kingdom. We make no representations that materials, information, or content available on or through this Website are appropriate or available for use in other locations, and access to them from territories where, accessing such materials, information, or content is illegal or prohibited. Those who choose to access this Website from other locations do so on their own volition and are responsible for compliance with applicable local laws.

Contacting Us

We welcome any queries, comments or requests you may have regarding this Notice. Please do not hesitate to contact us at contact@tailoredstay.co.uk.