Last updated: 10 January 2026

Welcome to Curated Keys Property Services Ltd. (“we”, “our”, or “us”). This privacy policy explains how we collect, use, and protect your personal data when you visit our website www.curatedkeys.co.uk or book accommodation with us.

1. Who We Are

We act as the Data Controller for the personal information collected through our website and booking systems.
If you have any questions about this policy, please contact us:
Email: [email protected]
Address: 82A James Carter Road Mildenhall Suffolk IP287DE United Kingdom

2. What Information We Collect

We may collect and process the following data:

Personal details: Name, email address, phone number, billing address, and identification details for booking verification.

Booking details: Stay duration, property preference, payment method, and guest information.

Technical data: IP address, browser type, device, and cookies for website analytics.

Communication records: When you contact us via email, chat, or booking form.

3. How and Why We Use Your Data

We use your data under lawful bases defined by UK GDPR:

Contractual obligation: To manage bookings, process payments, and provide customer service.

Legal obligation: To maintain records for tax, safety, or compliance.

Legitimate interests: To improve our website and services.

Consent: For marketing communications (you can withdraw consent at any time).

4. Data Retention

We keep your personal data only for as long as necessary:

Booking and payment data: up to 7 years (for HMRC compliance)

Marketing data: until you withdraw consent

Website analytics: typically 12–24 months

5. Data Sharing

We may share limited data with:

Airbnb and other booking platforms (as required for bookings)

Service providers such as payment processors and website hosts

Legal or regulatory bodies where required by law

We do not sell or rent your personal data.

6. International Transfers

If we transfer data outside the UK (e.g., hosting services), we ensure it is protected by appropriate safeguards, such as UK-approved data transfer mechanisms or adequacy decisions.

7. Your Data Protection Rights

Under the UK GDPR, you have rights to:

Access your data (“Subject Access Request”)

Request correction or deletion

Object to or restrict processing

Request data portability

Withdraw consent for marketing

To exercise your rights, contact us at [email protected]. If you’re not satisfied, you can lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

8. Cookies

We use cookies to personalise user experience and analyse site traffic. You can manage cookies via your browser settings or our cookie consent banner.

9. Security

We use SSL encryption, access control, and secure payment gateways to protect your data against unauthorised access or loss.

10. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with a revised “Last updated” date.