Legal

Privacy Policy

Last updated: 17 September 2026

This policy explains how UnityStays handles personal information — whether you contact us through this website, stay in one of our homes, work with us as a property owner, or we contact you at work about our accommodation.

1. Who we are

UnityStays is a trading name of Unity Space Property Ltd, a company registered in England and Wales (company number 15781520), registered office 128 City Road, London EC1V 2NX. We are the “data controller” for the personal data described in this policy. That includes information collected through this website and the details of business contacts we obtain from other sources and email about our accommodation (see section 5). You can reach us at unityspaceproperty@gmail.com. Our VAT registration number is 506247506.

We are registered with the Information Commissioner's Office as a data controller, reference ZC226880. If you are unhappy with anything we do with your information, please see section 8 — you can complain to us directly.

2. The information we collect

If you contact us through this website

When you use our enquiry, contact or earnings-estimate forms we collect:

  • Your name, email address and phone number;
  • Property details you choose to share (such as postcode/location, property type, number of bedrooms and hosting status);
  • The content of any message you send us; and
  • The information your browser sends automatically when you load a page, including your IP address, which our website host records in its server logs.

If you stay with us

When you book one of our homes — directly through our booking site or through a platform such as Airbnb or Booking.com — we handle:

  • Your name and the contact details you use to reach us;
  • Your booking: the home, the dates, how many people are staying, and what you paid;
  • The messages you send us and we send you about the stay;
  • Payment records, and the deposit or damage-waiver record for the booking; and
  • Any review you leave. We sometimes quote reviews on this website exactly as they appear on the booking platform, with the first name and the city shown there.

If you booked through a platform, we receive your details from that platform rather than from you. The platform is a separate company that decides for itself how it uses your information, and it has its own privacy policy.

If you own a property we manage

If we manage a property for you, we handle your name and contact details, the details of the property, the documents we need in order to let it lawfully and safely, the bank details we pay you into, and the statements and correspondence that go with the arrangement.

3. How and why we use it

We use your information to:

  • Respond to your enquiry and prepare a free, no-obligation earnings estimate;
  • Provide and manage our accommodation and property-management services;
  • Keep records and communicate with you about your enquiry or booking; and
  • Meet our legal and regulatory obligations.

Our lawful basis for each of these

  • Answering your enquiry and preparing a free earnings estimate — taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)). Where you are enquiring on behalf of a company, our legitimate interests in responding to business enquiries (Article 6(1)(f)).
  • Taking your booking and looking after you during your stay — performing our contract with you (Article 6(1)(b)).
  • Managing a property under a management agreement, and paying the owner — performing our contract with you (Article 6(1)(b)).
  • Keeping accounting, tax and company records — meeting a legal obligation (Article 6(1)(c)).
  • Protecting the homes we manage, including damage, disputes, unpaid charges and insurance claims — our legitimate interests in protecting the homes we look after and recovering what we are owed (Article 6(1)(f)).
  • Quoting guest reviews on this website — our legitimate interests in showing prospective guests and owners what previous guests have said (Article 6(1)(f)).
  • Emailing people at organisations about our accommodation — our legitimate interests in marketing to other businesses (Article 6(1)(f)); see section 5.
  • Keeping this website secure and working — our legitimate interests in running a secure website (Article 6(1)(f)).

We do not rely on your consent for any of this, so there is no consent for you to withdraw. If that ever changes we will say so here and ask you separately.

You do not have to give us your details. If you do not, we will not be able to answer your enquiry, prepare an estimate, take a booking or manage a property for you. Once you are a guest or a client, there is some information we are required by law to keep — accounting and tax records, for example — and we will tell you at the time if that applies.

We do not make decisions about you by automated means alone that have a legal effect on you or a similarly significant effect.

4. Who we share it with

We never sell your information. These are the providers involved in running this website and our service, and what each one does with your information:

  • Netlify — hosts this website. Its servers record the usual request information, including your IP address. Netlify's data processing terms form part of its agreement with us.
  • FormSubmit — delivers the messages you send through our website forms to our inbox, and keeps a copy for 30 days. Its operator does not publish where it is based or where those copies are stored.
  • Make — passes landlord enquiries into our own systems. We use its EU data centre.
  • Guesty — our booking and guest-messaging platform.
  • Google — provides the email account our enquiries arrive in. It is a standard Google account, covered by Google's own terms rather than by a separate data processing agreement with us. It also receives copies of replies sent to the business contacts described in section 5.
  • Explee (Explee Ltd, company number 15759064) — runs our emails to people at other organisations. For some of these emails it supplies the names and job details of the people we email from its own business contact database and finds or works out their work email addresses; for others we give it an address the organisation publishes on its own website. Its software writes the emails from our instructions, and it sends them from its own email accounts. Since 17 September 2026 most of these emails show the name of our director, Gadir Al Khatib; the rest show a sender name Explee supplies. An automated assistant can answer a reply for us. It receives any replies and keeps a record of all of this in its own system. Section 5 explains this in full.
  • tawk.to — runs the live chat, but only if you press the “Chat with us” button. It then receives what you type, your IP address and basic details of the pages you are on. It is not loaded at all unless you press the button.
  • Professional advisers, where we need their help with a particular matter.
  • The cleaners and maintenance contractors who look after the home you are staying in. They are told only what they need in order to do the job.

The booking platforms we list on are separate companies. They decide for themselves how they use the information you give them, and each has its own privacy policy.

Sending information outside the UK

Some of these providers operate outside the UK.

  • Make — the European Union. The UK government has decided the EU offers an adequate level of protection.
  • Guesty — the United States and Israel. Israel is covered by UK adequacy regulations. For the United States we rely on the safeguards set out in our agreement with Guesty.
  • FormSubmit — the provider does not say where it is based or where it stores submissions, so we cannot tell you.
  • tawk.to — the United States, where it says it carries out all of its processing. It relies on the UK Extension to the EU–US Data Privacy Framework. This applies only if you start a chat.
  • Explee — Explee has not yet told us where it, or any supplier it uses, stores or accesses the information described in section 5, so we cannot tell you yet. We have asked it in writing and will update this section when it answers.

Email us and we will send you a copy of the safeguards we rely on, with any commercially confidential terms removed.

5. Business contacts we email

We email people at UK organisations that may need somewhere for their staff, contractors or clients to stay, to offer our homes. Since 16 September 2026 we have done this through Explee Ltd, which sends the emails for us and, for some of them, also finds the business contacts. This section explains whose details we use, where they come from, how the emails are sent, how long the details are kept and how to stop the emails.

People we email from Explee's contact database

These emails go to people at construction and engineering contractors who deal with where site teams stay. From 16 September 2026 until we stopped it on 17 September 2026, a second campaign also emailed people at hospitals, NHS trusts, other healthcare employers, healthcare staffing firms and a few other organisations, mostly in the UK. We will not email the people from that campaign again.

  • What Explee holds about you for us: your name, job title and work email address; the organisation you work for and details about it, such as its website, size and location; and, where Explee's data includes them, a link to your LinkedIn profile, your country and a phone number. Some of these may be blank. Explee also holds the emails sent to you, any reply you send, how Explee's software classified your reply (for example as interested, not interested, out of office or unsubscribe) and any note we add. We do not phone anyone we contact this way.
  • Where your details come from: Explee supplied your name and job details from its business contact database, which Explee says draws on sources including business and employment-oriented social networks. Explee also found or worked out your work email address. We did not get your details from you or from your employer. We have asked Explee in writing to tell us, when someone asks, where it found that person's details. Ask us and we will pass on what Explee tells us.
  • Who we ask Explee to email: people whose work deals with where site teams stay, such as site and project managers, logistics, travel and accommodation coordinators, procurement staff, and HR or welfare staff. We ask Explee to leave out sole traders, partnerships that are not incorporated and private individuals, and we block personal email services such as Gmail and Outlook. Explee's software chooses the people it judges to match what we describe.
  • Why, and our lawful basis: to offer our accommodation to organisations that may need it. We rely on our legitimate interests in marketing to other businesses.
  • How the emails are sent: Explee's software writes the emails from instructions we give it. Explee sends them from its own email accounts and email domains, not from a UnityStays address. Until 17 September 2026 the sender name was a persona name supplied by Explee: an invented name, not someone who works for UnityStays, even where an email said the sender was “from Unity Stays”. Since then, Explee tells us about 9 in 10 emails show the name of our director, Gadir Al Khatib; the rest still show a sender name Explee supplies for its mailbox. We checked every email sent in September 2026: each one named Unity Space Property Ltd and our company number and told you how to opt out, but almost none said where your details came from, and none linked to this policy. That is why we set it out here.
  • How many: we tell Explee to send each person at most three emails in a campaign: a first email and no more than two follow-ups.
  • If you reply: your reply goes to Explee's system, where we read it. Explee's automated assistant may answer your reply for us after a delay, using information we have given it about our homes. If you ask us to stop, it confirms that in one line and sends nothing more. It is instructed not to deal with questions about your data or complaints; we answer those ourselves. A copy of every answer goes to our own inbox, unityspaceproperty@gmail.com, and you can always write to us there instead.

Organisations we email at a published address

Since 17 September 2026 we have also given Explee general business email addresses that organisations publish on their own websites, for organisations that place people in accommodation, such as relocation firms, insurance accommodation providers, contractor-accommodation agencies, corporate housing agents and travel management companies.

  • What we hold: the organisation's name and registered company details, a business email address published on its own website (usually a general or department inbox), and a record of the emails sent and any reply.
  • Where it comes from: the organisation's own website and the public Companies House register. We record where we found each address.
  • Why, and our lawful basis: the same legitimate interests as above. We only use this route for incorporated organisations (companies and LLPs).
  • How the emails are sent: in the same way as above. Explee's software writes them from our instructions and sends them from its own email accounts, at most three emails per address. Most show the name of our director, Gadir Al Khatib; Explee tells us about 1 in 10 still show a sender name it supplies. We instruct Explee to name Unity Space Property Ltd and its company number in every email, to say that we found the address on the organisation's website, and to tell you how to opt out.

Your right to object, and how we stop

  • You can object at any time to us using your details for marketing, and we will stop. You do not have to give a reason or use any particular words. Reply “unsubscribe” to any of our emails, or email unityspaceproperty@gmail.com.
  • What happens next: a reply that Explee's system records as an unsubscribe stops further emails straight away. Replies it classes as an unsubscribe or “not interested” are also added to our own suppression list by the next working day. If you object in other words, or by emailing us, we add you when we read it. Explee checks our suppression list before every email it sends for us, so any follow-up already scheduled is stopped too. We keep your address, the date and a short note of your request on that list, and we use it for nothing else.
  • Explee's own opt-out record: Explee also keeps its own record of people who opt out, which it tells us applies across its platform. We cannot take a copy of it, which is why we keep our own list as well.

How long the details are kept

  • Our own records (copies of emails and replies in our inbox, and any notes we keep): we review them at least once a year and delete anything more than 12 months after the last email between us, unless your organisation starts working with us, in which case section 7 applies.
  • Records held by Explee: Explee keeps your profile details, the emails sent to you and any reply in its own system. It has not yet confirmed how long it keeps them, so we cannot tell you that yet. We have instructed it in writing to delete them 12 months after the last email, and we will update this section when it confirms.
  • If you ask us to delete your details: we will delete them from our own records, instruct Explee to delete them from its system, and tell you what Explee confirms. We will keep your email address on our suppression list so that you are not contacted again.
  • Explee's business contact database exists separately from our emails. You can ask Explee about it directly, or ask us and we will pass your request on.
  • Our suppression list: kept indefinitely, because that is the only way to be sure we do not contact you again.

Section 4 says what we know about where Explee stores your details. Section 8 explains your other rights, including your right to complain to the Information Commissioner's Office.

6. Cookies

This website does not place cookies on your device. It does not use local storage, analytics, advertising or any other tracking tool. That is why you are not asked to accept cookies here — there is nothing to accept.

There is one exception, and only if you choose it. If you press the “Chat with us” button, we load a live-chat service from tawk.to, and at that point tawk.to places cookies and local storage on your device and receives your IP address. Nothing is loaded from tawk.to and nothing is stored until you press the button, which is why there is no cookie banner: you ask for the chat, and the storage is there to provide it. If you would rather not, do not press the button — email or call us instead, and nothing is stored.

Our booking site, unitystays.guestybookings.com, is a separate site running on Guesty's platform, and the booking platforms we list on are separate sites too. We are not responsible for the cookies and similar technologies those sites use; please see their own information.

7. How long we keep it

We keep information only as long as we need it. In practice:

  • Enquiries that do not turn into a booking or a management agreement — 24 months after we last hear from you, then deleted.
  • The copy your form submission leaves with our form provider — 30 days, which is that provider's own retention period.
  • Guest booking records and the financial records that go with them — 7 years from the end of the accounting year they fall in. The legal minimum is shorter: a company must keep the records behind its corporation tax return until the sixth anniversary of the end of the period the return covers, and longer if HMRC opens an enquiry (Finance Act 1998, Schedule 18, paragraph 21), and a private company must keep its accounting records for three years from the date they are made (Companies Act 2006, section 388(4)). We keep a full extra year so that a late query or a re-opened enquiry can be answered.
  • Guest messages that are not part of a financial record — 24 months after you check out.
  • Property owner records — the length of the agreement, and 7 years after it ends, for the same tax and accounting reasons.
  • Reviews we quote on this website — until we refresh the page, or until you ask us to take yours down.
  • Business contacts we email — see section 5.

8. Your rights

Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to processing, and to data portability. To exercise any of these, email unityspaceproperty@gmail.com.

Objecting to what we do

You have the right to object at any time to us using your information for direct marketing, and if you do we will stop. You can also object to anything we do on the basis of our legitimate interests. Email us and we will deal with it. You do not have to give a reason for objecting to marketing.

If you want to complain to us

If you think we have got something wrong with your information, please tell us first. Email unityspaceproperty@gmail.com, or write to our registered office: Unity Space Property Ltd, 128 City Road, London EC1V 2NX. You can also use the form on our contact page. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you posted on how it is going, and tell you the outcome. If your complaint is about our service rather than your information, our complaints procedure sets out how we handle it.

Complaining to the regulator

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. You can do that at any time, and you do not have to come to us first.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with its “last updated” date.

Questions about your privacy? Email unityspaceproperty@gmail.com or visit our contact page.