Partner Privacy & Data Processing Policy
Last updated: October 2026 • Compliant with UK GDPR, the Data Protection (Bailiwick of Guernsey) Law, 2017, and the Data Protection (Jersey) Law 2018
1. Information We Collect from Partners
When you register and operate a Partner account on Island Stay, we collect: (a) authentication and identity credentials via Clerk (name, business email, phone number); (b) property and business details (business name, island location, parish address, trade license number, and listing media); (c) payout and settlement identifiers (UK/Channel Islands bank sort code, account number, account holder name, SumUp Merchant ID, or PayPal business email); and (d) encrypted OTA channel credentials where two-way synchronization is enabled.
2. How We Use & Protect Financial and Channel Credentials
OTA channel passwords and API keys are encrypted at rest using AES-256-GCM before storage. Bank sort codes and account numbers are used exclusively to execute BACS/Faster Payments settlements and are masked in API responses and remittance logs.
3. Guest Personal Data & Joint Controller Obligations
When a guest books your listing, we share only the guest details strictly necessary to fulfill the reservation (guest name, stay dates, party size, and direct portal messaging). Public iCal export feeds automatically redact guest personal names (`Island Stay Reserved`) to prevent third-party calendar leakage. Partners must not use guest contact information for unsolicited marketing.
4. Cookies & Product Telemetry
We use strictly necessary session cookies (Clerk authentication) to keep your Partner workspace secure. Optional product analytics cookies (PostHog EU cloud) are only initialized if you grant consent via the Cookie Preferences banner.
5. Data Retention, Export & Account Deletion
Partners may permanently delete their Partner account and associated listings at any time via Dashboard > Settings > Danger Zone, or request a full data export or erasure by emailing support@islandstay.co.uk. Statutory financial and tax remittance records are retained for 6 years as required by law.