** WARNING: connection is not using a post-quantum key exchange algorithm.
** This session may be vulnerable to “store now, decrypt later” attacks.
** The server may need to be upgraded. See https://openssh.com/pq.html
Who we are
CA Stay is a trading name of Cambridge Accommodation Stay Ltd (the “Operator”), a company registered in England and Wales. Our website is ca-stay.com. For privacy questions, contact us at info@ca-stay.com.
This policy explains what personal data we collect about you, why we collect it, and what we do with it. It applies to bookings made through ca-stay.com. It does not apply to bookings made via Airbnb, Booking.com, or other third-party platforms, which are governed by those platforms’ own policies.
What we collect, and why
When you make a booking
To confirm a reservation and contact you about your stay, we collect:
- Your name
- Email address
- Phone number
- Country of residence
- Postal address (for the card billing check)
- Check-in and check-out dates
- Any notes you add to your booking
Lawful basis: performance of a contract with you (Article 6(1)(b) UK GDPR).
When you pay
Card payments are processed by Stripe Payments UK Ltd. We do not see or store your full card details on our servers. Stripe handles those directly. We retain only the Stripe payment reference (used to issue refunds and reconcile bookings) and the amount paid.
When you visit the site
Our website uses standard server logs that record IP addresses, browser user-agents, pages visited, and timestamps. These logs are kept for 90 days and used only to investigate technical issues, spam, and abuse.
If you accept analytics cookies (see the cookie banner on first visit), we use Google Analytics 4 to count visits, see which pages and listings are most popular, and measure how often visitors complete a booking. Google Analytics sets cookies on your device that store an anonymous identifier; we never give Google your name, email address, or any other personal data. Google processes this data on US servers under the EU-US Data Privacy Framework.
You can withdraw consent at any time using the cookie settings widget in the bottom-left corner of any page.
How long we keep it
- Booking records: kept for 7 years after the stay ends, in line with UK tax record-keeping requirements.
- Marketing emails: we do not currently send marketing emails. If we add a newsletter, it will be opt-in only and you can unsubscribe at any time.
- Server logs: 90 days.
Who we share it with
We only share your personal data where strictly necessary to deliver your stay:
- Stripe: payment processing.
- Google Workspace: to send and receive emails from
info@ca-stay.com. - Our hosting provider: to operate the website infrastructure.
- HMRC and other authorities: only where legally required.
We do not sell your personal data to anyone. We do not share it with marketing companies.
Your rights
Under UK GDPR you have the right to:
- Ask what personal data we hold about you
- Ask us to correct anything that is inaccurate
- Ask us to delete your data once the legal retention period has expired
- Object to processing or restrict it in certain circumstances
- Receive your data in a portable format
- Complain to the Information Commissioner’s Office (ICO) if you think we have handled your data unlawfully
To exercise any of these rights, email info@ca-stay.com. We will respond within one month.
Cookies
We use cookies in two categories:
- Strictly necessary cookies — to keep you signed in (if you create an account), remember your booking progress through checkout, and let Stripe process payments securely. These are required for the site to work and don’t need your consent under UK PECR rules.
- Analytics cookies — only set if you click Accept on the cookie banner. We use these to understand which pages are popular and how visitors find us. You can decline these without losing any site functionality.
You’ll see the cookie banner the first time you visit. To change your choice later, click the Cookie Preferences button in the bottom-left corner of any page.
Changes to this policy
If we make material changes to this policy, we will update this page and update the “Last updated” date below.
Last updated: 20 May 2026