Privacy notice — AwayStays

This is an early access waitlist for AwayStays. We are not taking bookings or payments yet. This notice explains what we collect when you join the list and why. It is a plain-English summary and will be replaced by a full privacy policy before any real bookings go live.

Who is responsible for your data

The data controller is Sonny Branchflower, trading as AwayStays. Contact: hello@awaystays.net.

What we collect

Your name and email address.
Optionally, a WhatsApp/phone number you choose to share.
Fan details you submit — team supported, location, event/city interest, what you'd need, and any notes you add.
For hosts: your city/postcode area, what you could offer, rough pricing, and whether you'd complete checks.
Basic technical info such as how you reached the site (referrer/UTM).

We do not collect ID documents, payment details, or exact addresses at this stage.

Why we collect it

To gauge early demand, understand which cities and events matter, and contact you when relevant stays or hosting opportunities open up. Our lawful basis is your consent, which you can withdraw at any time by emailing hello@awaystays.net or by clicking unsubscribe in any email we send you.

Where it's stored

Your details are stored with our database provider (Supabase) and our email provider (Resend), both acting as data processors. Data is stored on servers in Ireland (EU). Both providers are US-headquartered companies and process data under Standard Contractual Clauses (SCCs) / UK International Data Transfer Agreements (IDTAs) to ensure your data is protected in line with UK GDPR. We do not sell your data or share it for advertising.

Retention & your rights

We keep your details only as long as needed to contact you about AwayStays early access, and no longer than 2 years from the date you sign up. Under UK GDPR you have the right to access, correct, delete, or restrict processing of your data. You can exercise any of these rights at any time by emailing hello@awaystays.net. We will respond within one month.

ICO registration

Organisations that process personal data in the UK are generally required to register with the Information Commissioner's Office (ICO). We are reviewing our registration obligations as AwayStays grows. You can contact the ICO at ico.org.uk if you have concerns about how your data is handled.

Changes to this notice

This notice will be updated before any bookings, payments, or ID collection go live. We will notify you of material changes by email.