ShireStay — Shire Services GroupShireStay
Sign inHost portal

Privacy Policy

Last updated: 26 July 2026

1. Who we are

ShireStay (Shire Services Group) is the data controller for personal data collected through this platform. We are registered with the UK Information Commissioner's Office under reference ZB744042.

2. Data we collect

  • Account details: name, email, role (guest / host / partner / trade).
  • Booking data: dates, property, guest count, price, payment status.
  • Host compliance documents you choose to upload to the Compliance Vault.
  • Payment metadata from Stripe (we never store full card numbers).
  • ShireMart loyalty tokens and points transactions when you connect the two accounts.
  • Approximate location data from service trades on active jobs, used only while a dispatch is live.

3. How we use it

To operate bookings, payouts, loyalty rewards, and lead dispatch; to keep the platform secure; and to send transactional emails (booking confirmations, host notifications, dispute updates). We do not sell personal data.

4. ShireMart connection

When you sign in with ShireMart or opt into loyalty rewards, we exchange OAuth 2.0 tokens with ShireMart. We share only: your verified email (to match accounts), booking or trail-engagement events (to award points), and merchant identifiers (to route rewards). We never share your password, and we never receive your ShireMart card or bank details. Disconnecting from your guest dashboard revokes the token immediately.

5. Sub-processors

  • Stripe — payment processing, host payouts, checkout.
  • Supabase — authenticated database, storage, and email delivery infrastructure.
  • ShireMart — loyalty rewards and single sign-on (with your consent).
  • Cloudflare — hosting and edge delivery.

6. Retention

Booking and financial records are retained for at least 6 years to meet UK tax and accounting requirements. Account data is retained while your account is active and for a reasonable period afterwards, unless you ask us to erase it.

7. Your rights

Under UK GDPR you can request access, correction, deletion, or portability of your personal data, and object to or restrict certain processing. Email privacy@shire-stay.live to exercise these rights. You have the right to complain to the ICO at ico.org.uk.

8. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising or cross-site tracking cookies.

9. Contact

Data protection queries: privacy@shire-stay.live.