This Privacy Policy explains how we collect and use your personal data when you use the website available at carlosjackson.co.uk (the “Website”).

By using the Website or submitting a booking or contact request, you agree to this Privacy Policy.

Before using our services, please also read our Terms & Conditions and Renting Policy, which explain the conditions that apply to any stay or booking.

This Website is a static site that provides information about accommodation and allows you to contact us or send a booking request.

For the purposes of applicable data protection law (including the UK GDPR), CJ LONDON SERVICES LTD acts as the controller of the personal data you submit through the Website.

CJ LONDON SERVICES LTD (Company No. 15326470) is registered in England and Wales.Registered office: Flat 33, Providence House, Providence Place, Maidenhead, England, SL6 8BF.

The Website does not use tracking or analytics tools to monitor your behaviour.

Like most websites, our hosting and security providers may automatically process limited technical data (such as IP address, device/browser information, timestamps and requested pages) for security, abuse prevention and troubleshooting. We do not use this technical data to build profiles of visitors.

The only personal data we process is the information that you choose to provide when you:

• fill in a contact form, or

• send a booking request for accommodation.

This may include:

• your name

• your email address and/or phone number

• dates of stay and number of guests

• your message or any other details you decide to provide

• identity document details (where required before or at check-in)

• payment reference details and/or proof of payment (where you pay a deposit by bank transfer)

We may also process personal data if you contact us by phone or via messaging services (such as WhatsApp) using the contact options shown on the Website.

Please do not include any sensitive or unnecessary personal information in your message. If you do not provide the information we reasonably need (such as your contact details and requested dates), we may not be able to respond to or process your enquiry or booking request.

The Website and our services are not intended for children under 18, and we do not knowingly collect personal data from children.

We use the personal data you provide only for the following purposes:

• to read and respond to your enquiry or booking request

• to communicate with you about your potential or confirmed stay

• to manage and administer bookings and related services

• to keep basic records of enquiries and bookings for our legitimate business purposes (for example, accounting and record-keeping)

We do not use your data for broad marketing campaigns, nor do we sell your data.

We rely on the following legal bases to process your personal data:

1. Contract or steps prior to a contract:

• When you submit a booking request or enquiry, we need to process your data in order to respond and, where applicable, to enter into or perform a rental agreement with you. This includes processing the information needed to confirm a booking after a deposit has been paid.

2. Legitimate interests:

• We may keep limited records of enquiries and bookings for our legitimate business interests, such as maintaining evidence of communications or complying with basic administrative obligations, provided that these interests are not overridden by your rights and interests. This legal basis also applies to limited technical data processed for website security, abuse prevention and troubleshooting.

3. Legal obligation:

• We may retain certain booking, payment or accounting records where required to comply with legal obligations (for example, tax or accounting rules).

4. Consent:

• If we ever rely on your consent (for example, for any optional communication), you will be free to withdraw that consent at any time.

We keep your personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods are:

• general enquiries: up to 12 months

• booking correspondence and stay details: up to 24 months after the end of the stay (to handle follow-up queries or complaints)

• booking and payment records (including invoices): up to 6 years (for tax and accounting purposes)

• identity document details (where collected): only as long as needed for verification and security, then securely deleted

Technical log data (if processed by our hosting or security providers) is retained in accordance with those providers’ retention practices and is used only for security, abuse prevention and troubleshooting.

We may retain data for longer if required by law or if needed to establish, exercise or defend legal claims. Once data is no longer needed, we will take reasonable steps to delete or anonymise it.

We do not sell your personal data.

We may share your data only in the following limited circumstances:

1. Service providers:

• With trusted service providers who help us operate the Website or manage communications (for example, hosting, email and security providers, and messaging services used to handle enquiries). These providers are allowed to use your data only to provide their services to us and must keep it secure.

2. Legal obligations and protection:

• Where required by law, or where we reasonably believe it is necessary to protect our rights, property, or safety, we may disclose your information to relevant authorities or third parties.

We do not authorise third parties to use your data for their own marketing purposes.

If any of our service providers are located outside the United Kingdom, your personal data may be transferred to and processed in other countries.

Where this occurs, we will take appropriate steps to ensure that your data remains protected in line with applicable data protection laws (for example, by relying on appropriate contractual safeguards).

Where required, we use UK-recognised safeguards for international transfers (for example, adequacy regulations or approved contractual safeguards).

Depending on the circumstances and subject to applicable law, you may have the following rights in relation to your personal data:

• to access a copy of the personal data we hold about you

• to ask us to correct inaccurate or incomplete data

• to request the deletion of your data in certain situations

• to object to or request restriction of our processing in some cases

• where we rely on consent, to withdraw that consent at any time

• where applicable, to receive your personal data in a portable format (data portability)

We do not use automated decision-making or profiling to make decisions that have legal or similarly significant effects on you.

To exercise any of these rights, please contact us using the details provided in the “Contact us” section below.We may need to verify your identity before responding to your request.

If you are not satisfied with how we handle your personal data, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

ICO contact details: Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.Telephone: 0303 123 1113.

We take reasonable technical and organisational measures to protect the personal data you provide from unauthorised access, loss, misuse or alteration.

However, no method of transmission over the internet or method of electronic storage is completely secure.You submit data through the Website at your own risk, and we encourage you not to share more personal information than is necessary.

The Website may contain links to third-party websites or services.We are not responsible for the privacy practices, content or security of those third-party sites.

If you follow a link to any other website, you should read that website’s own privacy policy before providing any personal data.

We may update this Privacy Policy from time to time.Any changes will be posted on this page and will take effect from the date of publication, which will be shown in the “Last updated” line at the top.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

If you have any questions about this Privacy Policy, or about how we handle your personal data, please contact us via the contact page on the Website.

If you are exercising your data protection rights, please include enough information for us to identify you and your request (for example, your name and the email address or phone number you used when contacting us), and clearly state that it is a “privacy request”.

Post: CJ LONDON SERVICES LTD, Flat 33, Providence House, Providence Place, Maidenhead, England, SL6 8BF.