Privacy Policy

Pied à Terre London ("we", "us", "our") is the data controller responsible for the personal data we collect from landlords, guests, and visitors to our website. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect the following categories of personal data:

• Identity & contact data: name, email, phone, postal address, date of birth, and identity verification documents where required.
• Property data (landlords): address, ownership details, compliance certificates, and bank details for remittance.
• Booking data (guests): booking dates, party composition, payment details, and any preferences shared with us.
• Technical data: IP address, browser type, device information, and cookies when you visit our website.
• Communications: correspondence and records of interactions with our team.

We process your personal data to:

• Provide property management services to landlords and hospitality services to guests.
• Process bookings, payments, deposits, and refunds.
• Verify identity, age, and party composition prior to a stay.
• Communicate about your booking, property, or enquiry.
• Comply with legal, regulatory, and tax obligations.
• Improve our services, website, and security.

We rely on the following lawful bases under UK GDPR:

• Contract — to perform our services for you.
• Legal obligation — to comply with applicable law and regulation.
• Legitimate interests — to operate, secure, and improve our business in a way that does not override your rights.
• Consent — where required, for example for certain marketing communications.

We share personal data only where necessary, including with:

• Booking platforms (e.g. Airbnb, Booking.com, Vrbo) to manage reservations.
• Payment processors and banks to handle transactions.
• Identity verification providers for guest vetting.
• Cleaning, maintenance, and contractor partners to service the property.
• Professional advisers, regulators, and authorities where legally required.

We do not sell your personal data.

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, including legal, accounting, or reporting requirements. Booking and financial records are typically retained for a minimum of six years.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

Our website uses cookies and similar technologies to operate the site, remember preferences, and understand how visitors interact with our content. You can control cookies through your browser settings.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access to data within our team is limited on a need-to-know basis.

We may update this policy from time to time. The latest version will always be available on this page, with the effective date noted below.

For any privacy enquiries or to exercise your rights, please contact us via our Contact page. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.