Who this policy applies to
This policy applies to website visitors, guests, prospective guests, landlords, property owners, accommodation suppliers, partners, contractors, introducers and other people who communicate with 365 Short Lets through this website or our business channels.
For information collected through this website, 365 Short Lets is responsible for handling your personal information in connection with the relevant enquiry or service. Where a separate agreement identifies a specific contracting entity or controller, that agreement applies to the relationship it covers.
Information we may collect
We may collect names, contact details, organisation details, property information, accommodation requirements, travel details, messages, enquiry history and any documents or information you choose to send us.
We may also receive limited technical information needed to operate and protect the website, such as device or browser information, request timestamps, IP address or similar security and diagnostic data. We aim to collect only information reasonably necessary for the relevant enquiry, booking, management, supplier, partnership, security or support purpose.
How we use information
Information may be used to respond to enquiries, source or manage accommodation, assess property-management opportunities, arrange requested travel or related services, manage supplier or partner relationships, provide requested services, route enquiries to the appropriate 365 team, keep appropriate business records, prevent misuse, investigate technical issues, improve the website and comply with legal obligations.
Where optional analytics or marketing technology is used, it should only operate in accordance with your cookie choices and applicable law.
Google Analytics and Search Console data
When an authorised 365 administrator connects a Google account to Shannon, we request only read-only access to Google Analytics and Google Search Console using analytics.readonly and webmasters.readonly. This lets us retrieve analytics and search-performance information for website properties that the administrator has authorised, including aggregate sessions and engagement metrics, search queries, pages, clicks, impressions, click-through rates and average positions.
We use this Google data only to produce internal website-performance and SEO intelligence for 365 and its managed websites. Shannon does not use this connection to change Google Analytics or Search Console data, and it does not request access to Gmail, Google Drive, Google Calendar or advertising accounts.
The live Google reports are retrieved when Shannon's intelligence functions run; we do not keep a separate raw copy of each complete Google report response. We store OAuth access credentials, granted scopes and expiry information, the authorised Analytics and Search Console property identifiers, and selected query, page and aggregate performance metrics used in derived SEO decisions, audit records and content recommendations. These records are held in access-controlled server-side systems and are not exposed through the public website.
No fixed automatic retention period currently applies. Credentials, property mappings and selected derived records are retained while the connection, operational reporting and audit history remain necessary, or until a verified deletion request is completed, subject to any legal obligation requiring limited records to be retained. Google-derived data is not sold or used for unrelated advertising, and is shared only with service providers needed to host, secure and operate Shannon.
An administrator can revoke Shannon's access at any time in their Google Account. To request disconnection and deletion of the stored Google OAuth credentials and associated Google-derived records, email info@365shortlets.co.uk.
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
Lawful bases
Depending on the context, processing may be necessary to take steps at your request before entering a contract, perform a contract, comply with a legal obligation, pursue legitimate business interests that do not override your rights, or rely on consent where consent is required.
Sharing information
We may share relevant information with accommodation providers, property owners, service suppliers, professional advisers, technology and hosting providers, payment or communications providers and other parties where reasonably necessary to deliver the requested service, secure the website or operate the business.
We do not sell personal information as a standalone commercial product.
International processing
Some suppliers or technology providers may process information outside the United Kingdom. Where this happens, appropriate safeguards should be used where required by data-protection law.
Retention
We retain personal information only for as long as reasonably necessary for the relevant purpose, including contractual, accounting, dispute, fraud-prevention, security and legal requirements. Different records may have different retention periods.
Your rights
Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent and complain to the relevant supervisory authority.
To make a privacy request, email info@365shortlets.co.uk. We may need to verify identity before acting on a request.
Security
We use proportionate organisational and technical measures intended to protect information. Enquiry forms may use automated abuse controls, secure server-side routing and approved service providers to help protect submissions and deliver them to the appropriate team. No internet or storage system can be guaranteed completely secure, so sensitive information should only be supplied where necessary and through an appropriate channel.
Changes to this policy
We may update this policy as the website, services, legal requirements or technology change. The current version will be published on this page.