Privacy Policy

Scala Stays Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom.

Privacy contact: Lorenzo Giorgio — Email: lorenzo.giorgio09@gmail.com — Telephone: 07565014161.

Scala Stays Limited is registered with the Information Commissioner's Office (ICO). If you have a concern about how we process your personal data, we encourage you to contact us first so that we can try to resolve the matter. You also have the right to complain to the ICO.

Depending on how you interact with Scala Stays, we may collect:

• Full name, email address, telephone number
• Postal or billing address
• Booking and accommodation details, dates of arrival and departure
• Information relating to your stay
• Identification documents where required for legal, security or regulatory purposes
• Information contained in communications with us
• Payment and transaction information where applicable
• Information provided when you submit an enquiry

We may also receive personal data from third parties where necessary to provide our services, including booking platforms, property owners, corporate clients and service providers. When you use our website, certain technical information may be collected automatically, including IP address, browser type and version, device type, operating system, pages visited and cookie information.

We may use personal data to:

• respond to enquiries and requests for information;
• arrange and administer accommodation bookings;
• provide accommodation and related services;
• communicate with guests before, during and after their stay;
• verify identity where necessary or legally required;
• process payments and maintain financial records;
• comply with legal and regulatory obligations;
• prevent fraud, misuse or unlawful activity;
• manage relationships with property owners, clients and service providers;
• improve our website, services and customer experience;
• send marketing communications where permitted by law;
• deal with complaints, disputes and legal claims; and
• maintain the security of our systems and information.

We will not use your personal data for purposes incompatible with those for which it was collected unless permitted or required by law.

We process personal data only where we have a lawful basis to do so:

• Performance of a contract — where processing is necessary to enter into or perform a contract with you, including administering an accommodation booking.
• Legal obligation — where processing is necessary to comply with a legal or regulatory obligation.
• Legitimate interests — where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
• Consent — where required, we will ask for consent before processing, such as certain marketing or non-essential cookies. You may withdraw consent at any time.

For certain bookings or stays, we may need to collect identification documents or other information relating to identity, where necessary to comply with legal requirements, booking requirements, security procedures or other legitimate purposes connected with providing accommodation. We will only request identification information where reasonably necessary and will take appropriate measures to protect it.

We use technology, booking, property-management, pricing, payment, accounting, website and storage services to operate Scala Stays. Depending on the service and your interaction with us, these may include:

• Airbnb and Booking.com — accommodation booking and guest-management platforms;
• Uplisting — property and booking management;
• SafeGuest — guest information and identity-related processes;
• PriceLabs — accommodation pricing and revenue-management services;
• Wix — website and website-related services;
• Lovable — website/software development and related services where applicable;
• Xero — accounting and financial record management;
• Stripe — payment processing where applicable; and
• Google Drive — secure business document and data storage.

We may also share personal data with property owners or authorised representatives, cleaning and maintenance providers, professional advisers, insurers, regulators, law-enforcement authorities or other parties where necessary to provide our services, operate our business or comply with legal obligations. We require third parties that process personal data on our behalf to protect it appropriately. We do not sell personal data to third parties.

Some of the service providers we use may process personal data outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we take appropriate steps to ensure the transfer is lawful and that appropriate safeguards are in place, which may include adequacy decisions, approved contractual safeguards or other legally recognised transfer mechanisms.

We may send marketing communications where we are legally permitted to do so. You can opt out at any time by using the unsubscribe option included in our marketing emails or by contacting us. If you object to receiving direct marketing, we will stop using your personal data for that purpose.

Our website may use cookies and similar technologies to enable essential website functionality, remember preferences, understand how visitors use our website, improve performance and user experience, and support marketing or analytics activities where applicable. Some cookies are necessary for the website to operate, while others may require your consent. You can manage cookies through your browser settings and through the cookie consent controls provided on our website. Disabling certain cookies may affect the functionality of parts of our website.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide our services, maintain business and financial records, comply with legal and regulatory requirements, resolve disputes, enforce agreements or protect our legitimate business interests. When personal data is no longer required, we take reasonable steps to securely delete or anonymise it.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, alteration and disclosure. These may include access controls, password protection, secure systems and limiting access to people who need it for legitimate business purposes. However, no method of transmitting or storing information can be guaranteed to be completely secure.

Depending on the circumstances and applicable law, you may have:

• Right to be informed — to understand how your personal data is being used.
• Right of access — to request a copy of personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete information.
• Right to erasure — to ask us to delete your personal data in certain circumstances.
• Right to restrict processing — to ask us to restrict how we use your personal data.
• Right to data portability — to request certain data in a structured, commonly used, machine-readable format.
• Right to object — to object to certain types of processing, including direct marketing.
• Rights relating to automated decision-making — where applicable, to request human intervention.

These rights are not absolute and may be subject to legal exceptions.

To exercise any of your rights, contact Lorenzo Giorgio at lorenzo.giorgio09@gmail.com or 07565014161. We may need to verify your identity before responding. We will normally respond to a valid request within one month; where permitted by law this may be extended for complex or numerous requests. We will generally not charge a fee for reasonable requests, though a reasonable fee may apply to manifestly unfounded or excessive requests.

We have procedures in place to identify, manage and respond to personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will assess whether notification to the ICO is required and, where required, notify within the applicable legal timeframe. Where a breach is likely to result in a high risk to affected individuals, we will also consider whether they need to be informed.

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices, content or security of third-party websites. If you follow a link to another website, we recommend reviewing that website's privacy notice before providing personal information.

Our services are intended for adults. We do not knowingly collect personal data from children unless necessary for the provision of a service and permitted by applicable law. If you believe that we have collected personal data from a child improperly, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or the way we process personal data. The latest version will be made available on our website. Last updated: 2 October 2026.

If you have concerns about how we have handled your personal data, please contact us first: Lorenzo Giorgio, lorenzo.giorgio09@gmail.com, 07565014161. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Scala Stays Limited, 71-75 Shelton Street, Covent Garden, London, United Kingdom. Privacy contact: Lorenzo Giorgio — lorenzo.giorgio09@gmail.com — 07565014161.