Last updated: 4 July, 2025

Curious about how PenthouseStays uses data?

Welcome to the Privacy Policy of PenthouseStays. We are committed to safeguarding the privacy of our Guests, Hosts, and Website users. PenthouseStays, is providing this Privacy Policy (this "Policy") to inform you of our policies and procedures regarding the collection, use and disclosure of Personal Information we receive directly from you and from third-parties in relation to your use of www.penthousestays.com (the "Site") and linked pages including online registration forms related to our services, our mobile applications (the "Apps"), and our products and services including the reservation and use of accommodation at a PenthouseStays unit (an "Accommodation") (collectively with the Site and the Apps, "Services"). Depending on your activities when using our services, you may be required to agree to additional terms and conditions. This Policy also informs you of your rights and choices with respect to your Personal Information, and how you can contact us if you have any questions or concerns. We ensure all personal data of data subjects is processed following the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, and this Privacy Policy.

For the purpose of this Policy, "Personal Information" means any information relating to an identified or identifiable individual.

1. Introduction

Under this Privacy Policy format:

‘Company’ ‘our’ ‘we’ or ‘us’ refers to PenthouseStays, which is a trading name of Johnson Sachdeva LTD (will be referred to herein as ‘PenthouseStays’), a corporation registered in the UK under company number 13072044 and with our registered office being at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, and with contact email address privacy@penthousestays.com, which is responsible for your personal information under this Privacy Policy.

‘Host’ refers to the property owner or landlord (our client), a physical person or entity, who signs up and agrees to our company’s terms and conditions.

‘Guest’ refers to the individual, physical person who will be renting the Host’s property through one of the third-party online rental platforms such as Airbnb, Booking.com, Plum Guide, or directly.

‘You’ and ‘Yours’ refers to Hosts, Guests, and/or visitors of the Site collectively. You are the data subjects.

‘Site’ refers to our website www.penthousestays.com and linked pages including online registration forms related to our services.

2. What Personal Information Do We Collect About You?

Where applicable, we indicate whether and why you must provide us with your Personal Information, as well as the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to benefit from our Services if that information is necessary to provide you with them or if we are legally required to collect it to provide our Services. We may collect Personal Information about you directly from you, from third parties such as third-party software providers, online rental platforms and travel agencies, from Hosts, during the reservation process, during the pre-check-in process, as well as automatically through your use of our Services. Your personal data is processed for administering the reservation of an accommodation, for communication regarding our services, and for handling the requests of Guests and Hosts. The legal basis for processing the personal data of Guests and Hosts is contracted performance.

We generally retain your personal information for as long as it is necessary for the performance of the contract between you and us, and to comply with our legal obligations, or for as long as consent is granted. When the personal data that we have collected is no longer required, we will delete it securely. We may process data for statistical purposes, but in such cases, data will be anonymised.

Information We Collect Directly from You.

Pre-Check-In Registration. When you book an Accommodation with us, we may ask you for certain Personal Information, including your first name, last name, phone number, email address, registered billing address, nationality, and/or booking information prior to check-in via a secure online registration form. We may also ask you to submit a completed travel document where required by local regulations. This data is stored for 12 months for regulatory purposes as well as any potential legal dispute arising from providing our services. Any incorrect or duplicated information that is submitted via the secure online registration form during the pre-check-in process is deleted within 30 days once PenthouseStays is notified. You can contact us at privacy@penthousestays.com if you believe your details have been submitted incorrectly or duplicated.

ID Verification ("IDV") and Check-in. We may require Guests to provide a government-issued ID during the pre-check-in process to help ensure the safety of individuals and prevent fraud. ID verification is the most effective and accurate way to verify Guests, to comply with other legal obligations regarding accommodating guests, and to protect the property of the Host (legitimate and vital interest of the Host). ID verification is also necessary to avoid chargebacks. With your consent, we may use a third-party service provider such as Persona to handle ID verification on our behalf, including to securely capture a photo of your government-issued identification and compare it to a scan of your face to securely verify your identity. PenthouseStays does not receive your face scan. For information on how we, through our service provider, collect, use, and retain this data, see our Biometric Data Privacy Notice. The data in this paragraph is securely deleted promptly after ID verification is complete.

Payment Information. If you make a purchase through the Services, or if a security deposit is required for services you book with us, details regarding payment will be shown to you in advance. Your payment information, such as credit/debit card number or billing information, is securely collected by Stripe, a third-party payment processor, on our behalf, and your payment card remains transactable for no longer than 7 days. Stripe is also an independent controller of your personal data and may store details related to your transactions for five or more years for purposes such as tax, accounting, financial record keeping, legal, and fraud prevention and detection obligations. You can email Stripe at privacy@stripe.com to request that Stripe deletes any of your personal data that they may hold. We do not store card data on our servers.

Direct Bookings. If a Guest books a reservation directly with us, the guest reservation data is automatically synchronised to our third-party channel management software provider (Hostaway). This data may include: Guest name, Guest email address, Guest phone number, check-in and check-out dates and times, and reservation costs. This data is stored securely on Hostaways servers in compliance with UK GDPR for up to 5 years for purposes such as tax, accounting, financial record keeping, legal, and fraud prevention and detection obligations, as well as legitimate interest including financial analytics purposes. Guests can request the deletion of this synchronised data by emailing us at privacy@penthousestays.com.

Communications. If you contact us directly (e.g., via email, SMS, phone call, in-App messaging), we will collect your name, contact details, the content, date and time of your message and any attachments thereto, and other information you may directly provide to us. You may choose to submit your email address and phone number on our Site or online registration forms to receive our updates. You may also provide us with your reviews of our Services or complete surveys regarding our Services.

When providing your information, you should provide only complete, exact, correct, and up-to-date data to us. If you provide personal data about another person, you are liable for the lawful handling of that data, and you declare that you are authorised to provide that data, and that doing so does not infringe upon the privacy of that third party.

Information We Collect from Your Interactions with Us.

Customer service. If you reach out to us with inquiries or requests, we may keep a record of how your inquiry or request was handled. We use messaging and communication software that complies with UK GDPR. If you contact us via phone, we may record your call, and the phone number and call duration may be stored. We may utilise a third-party cloud-based service provider to transcribe calls. The purpose of storing this data is for quality assurance, training, and compliance purposes (legitimate interest). Call recordings and related transcriptions are stored securely on our third-party service providers' servers for up to 5 years, and a request for the deletion of call recordings and related transcripts can be made by emailing us at privacy@penthousestays.com.

Information We Collect Automatically.

Online usage data. We may automatically collect the following information about your use of our Services through cookies, web beacons, and similar technologies: your domain name; your browser type; operating system type, name, and version; mobile carrier; mobile advertising identifiers; MAC address; Internet service provider; page views; links you click; your IP address; location information; the length of time you visit or use our Services; referring URL; access date and time; mobile device ID; language information; device name and model; and other information about your activities within the Services and communications that we send you. Please see the section "Cookies and Other Tracking Mechanisms" below for more information. Where required under applicable law, we will perform such data collection only with your consent. Our Site may contain links to external websites managed by third parties. If you click on a link to a third-party website, the third-party may also transmit cookies to you. We are not responsible for personal data processing of any third party, and we strongly advise you to review the privacy policy and terms and conditions of every website you visit.

Property usage data. We automatically collect your PenthouseStays stay history (e.g., to identify you as a return guest). We may also automatically collect information regarding the use of an Accommodation (e.g., when a door was unlocked). We may also deploy certain types of sensors in our Accommodations, such as noise detection systems (which register only decibel levels, not conversations), motion sensors and smoking detection devices, to help us provide a great experience for all our guests, and to enforce our House Rules. We may also use or have access to security cameras in certain common areas of buildings housing our Accommodations (e.g., in communal lobbies or monitoring public entrances). Where required under applicable law, we will collect property usage data only with your consent.

Wi-Fi usage data. PenthouseStays manages the guest W-Fi network on some of its properties. If you connect to a PenthouseStays-managed guest Wi-Fi network offered on our premises, we temporarily log certain information about your connection necessary to provide and secure our Wi-Fi network, such as the IP address and MAC address of the device used to connect to our network, as well as the IP address of the destination to which the device is connecting. We do not access the content of your electronic communications when using our guest Wi-Fi network.

Information We Collect from Third Parties.

Other Bookers. We may obtain Personal Information about you from another PenthouseStays reservation Booker who adds you to their reservation.

Third-party partners, travel services, and Authorised Accommodation Partners. We may receive Personal Information when you book an Accommodation through indirect channels (e.g., third-party online travel agencies and rental platforms such as Airbnb, Booking.com, Plum Guide, and Expedia, corporate travel partners, or group sales accounts) or through a company with whom we have entered into a license or similar agreement to market and promote the PenthouseStays brand (“Authorised Accommodation Partners”). The Personal Information we receive from these third party partners, travel services, and Authorised Accommodation Partners may include your name, email address, phone number, other information associated with your user account with a third party service (e.g., your rewards or loyalty program number from an Authorised Accommodation Partner) and your PenthouseStays stay information (e.g., information on the PenthouseStays unit you are staying in, and your arrival and departure dates/times).

When a guest books a reservation via a third-party online travel agency or rental platform such as Airbnb, Booking.com, Plum Guide, and Expedia, these third-party providers may also automatically synchronise guest reservation data to our third-party channel management software provider (Hostaway). This data may include: Guest name, Guest phone number, check-in and check-out dates and times, chat message thread, and reservation costs. This data is stored securely on Hostaways servers in compliance with UK GDPR for up to 5 years for purposes such as tax, accounting, financial record keeping, legal, and fraud prevention and detection obligations, as well as legitimate interest including financial analytics purposes. Guests can request the deletion of this synchronised data by emailing us at privacy@penthousestays.com.

IDV Partners. We may also receive Personal Information from our IDV Partners regarding your identity for use in our trust and safety, fraud prevention and risk assessment efforts, including your photo and images of any government-issued identification documents you provide to those IDV Partners; however, we never receive any biometric data from those IDV Partners. Please refer to the section labeled "Information we Collect from You – ID Verification and Check-in" above and our Biometric Data Privacy Notice for more information.

Vendor and partner relationships. We receive Personal Information of employees and other individuals who are contact persons at our partners and vendors, such as contact details and other information relevant to the particular business relationship.

3. How We Use Your Personal Information

We use your Personal Information for the following purposes:

To operate, provide, and maintain our Services, to communicate with you about our Services, to respond to your inquiries, to fulfill our contract with you, to complete your transactions, and for other customer service purposes.

To tailor the content and information that we may send or display to you, and to otherwise personalise your experiences while using our Services, including personalising your PenthouseStays experience and identifying you as a return guest to provide products or services to you according to your preferences or restrictions. We may also tailor our Services and communications on the basis of your Site browsing history. Where required under applicable law, we will use your Personal Information for such purposes only with your consent.

To contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you relating to PenthouseStays or its partners, via email, SMS, and phone calls. Where required under applicable law, we will send you marketing communications only with your consent. We may also use the information that we learn about you to assist us in advertising our Services on third-party websites. We use marketing systems that comply with UK GDPR.

For quality assurance purposes.

To solicit a review or other feedback from you.

To better understand how users access and use our Services, both on an aggregated and individualised basis, in order to improve the quality and value of our Services, provide you and others with a better experience, and develop new Services, and for other research and analytical purposes.

To find and prevent fraud and respond to trust and safety issues that may arise.

For compliance purposes, including enforcing reservation terms or other legal rights, or as may be required by applicable laws and regulations, or requested by any judicial process or governmental agency.

For other purposes for which we provide specific notice at the time the information is collected.

4. When We Use Personal Information About You

We process your Personal Information only based on a valid legal ground, including when:

Consent. You have consented to the use of your Personal Information, for example, for marketing purposes or to track your online activities via cookies and similar technologies. We may also collect personal data based on consent from data subjects by using secure online registration forms related to our services that collect information related to the consent given by the individual.

Contract. We need your Personal Information to provide you with our Services, for example, to manage your booking or stay at an Accommodation, or to respond to your inquiries. We use personal information for fulfilling our obligations related to contracts and agreements with customers, partners and suppliers.

Legal obligation. We have a legal obligation to use your Personal Information, for example, to comply with tax and accounting obligations, or anti-terrorism laws.

Legitimate interest. We or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in using your Personal Information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party's legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests. Normally, to establish the legal basis for data collection, an assessment has been made during which a mutual interest has been identified.

5. Processing and Protection of Hosts’ Personal Data

We process the personal data of Hosts that is provided by them to us directly by them completing an online registration form via our Site, or via secure message.

We may ask Hosts for information such as a first name, last name, email address, city, country, postcode, mobile phone number, bank account details, identity details, ownership details, and other details which are pertinent to their property. We also store our communication with Hosts.

First name, last name, email address, city, country, postcode, mobile phone number, bank account details, identity details and ownership details are used for the purpose of administering the services, to provide information about processes related to the services, to ask for feedback, to solve requests on behalf of Hosts and Guests, and to process payments. The legal basis for this processing is contracted performance. The data according to this paragraph is processed until the administering of the services has concluded, maximally up to the limitation period for any disputes arising from the provision of the services.

Email address, first name and last name are also processed to inform Hosts about improvements of our services and related news, which means for direct marketing (our legitimate interest). The data is processed for as long as we provide our services, maximally up to ten years.

We also process Hosts personal data in order to communicate with Hosts. Processing the data according to this paragraph is based on the performance of the contract for the smooth provision and improvement of the services. The data, according to this paragraph, is processed until the administration of the services has concluded, maximally up to the limitation period for any disputes arising from the provision of the services, where the communication may be used as evidence before the court.

6. Processing based on Opt-In Consent of data subjects to receive Marketing and Newsletter Communications:

We can also process personal data (first name, last name, email address) to inform Guests, Hosts and potential customers about news regarding PenthouseStays via email.

Processing data and sending newsletters according to this section is based on a freely and explicitly given informed consent granted by opting in on an online form, on our Site, or via email. Personal data for this purpose is retained for so long as the relevant person remains opted-in to notifications, nevertheless maximally for five years.

Data subjects always have the right to withdraw consent by unsubscribing from the email campaigns in the footer of every single marketing email, or by emailing us directly at privacy@penthousestays.com.

This consent is also valid for the processors authorised by us to assist us with email campaigns.

7. How We Share Your Personal Information

We may employ third-party companies and individuals under contract to support our Services. We do not sell or otherwise disclose your Personal Information for purposes unrelated to our Services, unless otherwise described in this Policy or disclosed to you at the time your Personal Information is collected or shared. We may share your Personal Information under the following circumstances:

Affiliates. We may disclose the information we collect about you to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your Personal Information will be subject to this Policy.

Service providers. We may disclose Personal Information we collect about you to third party vendors, service providers, contractors, or agents who perform functions on our behalf, including to facilitate our Services, to provide the Services on our behalf, to perform Site-related services (e.g., maintenance services, database management, web analytics, fraud detection services relating to the activity of PenthouseStays Users (as defined below), and improvement of the Site's or Apps' features), to send marketing communications to solicit and aggregate reviews, or to assist us in analysing how our Site, Apps, and Services are used. We require these service providers to safeguard the privacy of Personal Information they process on our behalf.

Third-party travel services, referral services, and brokers. When you book an Accommodation via indirect channels or we receive your Personal Information through a referral service or broker, we may share your Personal Information with such channel, service or broker in order to manage your booking or provide credit for referrals.

Hosts, Landlords and property managers. We may share reports with Hosts, landlords and property managers regarding the use of their properties, such as cleaning and occupancy reports. Additionally, we may share guest names, dates of stay at their properties, and other necessary information for safety or security purposes (e.g., to keep out individuals who are not guests or respond to emergencies), or as necessary for legal compliance purposes or cooperation with law enforcement, as further detailed below.

Authorised Accommodation Partners. If you direct us to share your Personal Information with one of our Authorised Accommodation Partners, then we may share your Personal Information with that Authorised Accommodation Partner. That Authorised Accommodation Partner’s use of the shared Personal Information may be governed by the Authorised Accommodation Partner’s own privacy policy.

Advertising and analytics partners. We may share Personal Information about you with third-party advertising partners to serve advertisements regarding goods and services that may be of interest to you. We may also share information about the use of our Services with third parties for analytics and optimisation purposes. Some of our advertising partners are members of the Network Advertising Initiative ("NAI") or the Digital Advertising Alliance ("DAA"). If you do not wish to receive personalised ads, please use the NAI's Opt-Out Tool or the DAA's Opt Out Tool to opt out of receiving web-based personalised ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalised ads in mobile apps.

Business transfers. PenthouseStays may sell, transfer, or otherwise share some or all of its assets, including your Personal Information, in connection with the consideration, negotiation, or completion of a merger, acquisition, reorganisation, or sale of assets or in the event of bankruptcy.

Compliance with laws and law enforcement. PenthouseStays cooperates with government and law enforcement officials (e.g., police, immigration offices, customs authorities, anti-terrorism authorities, fire departments) and private parties to enforce and comply with the law. We will disclose your Personal Information to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of PenthouseStays or a third party, to protect the safety of the public or any person, to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical, fraudulent, or legally actionable, or for the detection or prosecution of criminal acts. We disclose personal data to law enforcement if it is required by law, or if we are legally obliged to do so. We will disclose any information about you to government or law enforcement officials and to our insurance services providers as we, in our sole discretion, believe necessary or appropriate to protect the property and rights of PenthouseStays or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical, fraudulent, or legally actionable. We may need to disclose personal data to competent authorities further to protect and defend our rights or any property.

Consent. We may also disclose your Personal Information with your permission. For example, with your consent, we may post your testimonial on the Site along with your name. If you would like your testimonial removed, please contact us.

8. Cookies and Other Tracking Mechanisms

We use cookies, web beacons, and log files to collect information about your use of our Site and Apps, as described above.

Cookies. We use "cookies" to collect information. A cookie is a small data file that we transfer to your computer's storage. We use cookies for two purposes. First, we use persistent cookies to save your login information for future logins to the Services. Second, we use session ID cookies to enable certain features of the Services, to better understand how you interact with the Services and to monitor aggregate usage by PenthouseStays Users and web traffic routing on the Services. Unlike persistent cookies, session cookies are deleted from your computer when you log off from the Site and Service and then close your browser. We use the following cookies:

Google. We use Google Analytics cookies and Google Tag Manager to analyse our Services. You can learn about Google's practices by going to https://policies.google.com/privacy/google-partners/, and opt out of them by downloading the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout. We also use Google cookies to serve ads based on a PenthouseStays User's prior visits to PenthouseStays. You can learn more about these cookies here and disable these cookies via Google's Ads Settings or Ad Settings for mobile apps.

You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Site or all functionality of the Service.

Web beacons. Our Site may contain electronic images known as Web beacons (sometimes called single-pixel gifs) and are used along with cookies to compile aggregated statistics to analyse how our Site is used and may be used in some of our emails to let us know which emails and links have been opened by recipients. This allows us to gauge the effectiveness of our customer communications and marketing campaigns.

Log data. When you visit the Site, whether as a PenthouseStays Reservation holder or a non-registered user just browsing (any of these, a "PenthouseStays User"), our servers automatically record information that your browser sends whenever you visit a website ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type or the webpage you were visiting before you came to our Site, pages of our Site that you visit, the time spent on those pages, information you search for on our Site, access times and dates, and other statistics. We use this information to monitor and analyse use of the Site and the Service and for the Site's technical administration, to increase our Site functionality and user-friendliness, and to better tailor our Site to our visitors' needs.

9. Children's Privacy

The Site is not directed to individuals under 16. We do not knowingly collect Personal Information from children under 16. If a parent or guardian becomes aware that their child has provided us with Personal Information without their consent, they should contact us via the information provided in the "How to Contact Us" section, below. If we become aware that a child under 16 has provided us with Personal Information, we will delete such information from our files.

10. Links to Other Websites

Our Site contains links to other websites. If you choose to click on a third-party link, you will be directed to that third party's website. The fact that we link to a third-party’s website is not an endorsement, authorisation or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third-party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other websites follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit. Some portions of the PenthouseStays ecosystem implement Google Maps/Earth mapping services, including Google Maps API(s). Your use of Google Maps/Earth is subject to Google's terms of use, which incorporates Google's Privacy Policy. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites, products, or services.

11. Third Party Services

We may make available to you at your election the services of third-party service providers, such as luggage storage, parking reservations, or activity concierge services. When you access these providers via the Services, you may be asked to provide certain Personal Information, such as your name, address, phone number, email address, credit card number or other payment information, drivers license number, and/or license plate number, which will be used by these service providers in the provision of their services. The treatment of the Personal Information you provide to any of these providers is governed by that provider's own Privacy Policy, and PenthouseStays is not responsible for their handling of your information; you should review them prior to providing your Personal Information.

12. Data Security

PenthouseStays is very concerned with safeguarding your Personal Information. When you enter particularly sensitive information (such as a credit/debit card number), submit your pre-check-in registration or reservation forms, or submit your ID, that information is encrypted using secure socket layer technology (SSL). We follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and once we receive it. Any data processed by our third-party software service providers is done so in an encrypted manner. All personal information supplied is stored securely following the UK GDPR, and we are continuously updating administrative, technical, and physical security measures to help protect your information against unauthorised access, loss, destruction, or alteration. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our Site and Services, you can contact us. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored "personal data" (as defined in applicable regulations on security breach notification) to you via email or conspicuous posting on the Site in the most expedient time possible and without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

13. Phishing

Identity theft and the practice currently known as "phishing" are of great concern to PenthouseStays. Safeguarding Personal Information to help protect you from identity theft is a top priority. We do not and will not, at any time, request for you to provide your credit card information, login password, or national identification numbers in a non-secure or unsolicited email or telephone communication.

14. Data Retention

We take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of Services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our Services, the impact on the Services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations. We may delete information from our systems, without notice to you, once we deem it is no longer necessary for the purposes set forth in this Policy.

15. Your Rights and Choices

Marketing and consent opt-out. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. If you decide at any time that you no longer wish to receive marketing communications from us, please follow the unsubscribe instructions provided in any of the communications. Withdrawal will not affect the lawfulness of processing before the withdrawal. Please note that even if you opt out of receiving promotional messages from us, you will continue to receive administrative or transactional messages from us.

Changing or deleting information. All PenthouseStays guests may review, update, correct, or request deletion of their Personal Information by contacting us at privacy@penthousestays.com or editing the relevant part of their reservation via the online rental platform on which they made their reservation. We will attempt to accommodate your request if we do not have any legal obligation or a legitimate business reason to retain the information contained as part of your PenthouseStays reservation, or where the data is not critical to our normal business operation. We consider data to be critical to our business operation if it is used to provide goods or services to you, to detect and resolve issues related to security or functionality, or to comply with legal obligations. Please be aware that in some circumstances, such requests may prevent us from providing you with our services. Please note that if you delete your PenthouseStays information, any reviews you have posted via the Site will remain publicly viewable via the Site.

General exclusions. There are specific general exclusions of the right to erasure. Those general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims.

Opt out from cookies. Most Internet browsers automatically accept cookies, but you may be able to change the settings of your browser to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you set your browser to reject cookies, parts of our Site may not work for you.

Privacy rights. You are entitled to reach out to us at privacy@penthousestays.com and ask us for an overview of your Personal Information or ask for a copy. Providing the rights and freedoms of others are not affected, we will provide you with a copy of your data within ICO advised timelines. In addition, you may request us to update and correct inaccuracies, delete your Personal Information, restrict processing of your Personal Information, or exercise your right to data portability and to easily transfer your Personal Information to another company. In some cases, you may object to the processing of your Personal Information, and where we have asked you for your consent to process your Personal Information, you can withdraw it at any time. These rights may be limited in some circumstances by local law requirements. We always enjoy hearing from you and appreciate your business, and if you consider that our processing of your Personal Information infringes the UK GDPR, you can contact us at privacy@penthousestays.com to request the removal of such data. If you are located in the UK, you have the right to lodge a complaint with the UK Information Commissioner's Office.

16. Changes to this Policy

Because we're always developing and improving standards of services we provide to you, this Policy may change over time. We will post the new Policy online and we will change the "Last Updated" date. We encourage you to periodically review this page for the latest information on our privacy practices.

17. Closing Provisions

Any dispute, controversy or claim arising under, out of or relating to this Privacy Policy including, without limitation, its formation, validity, binding effect, interpretation, performance, breach or termination, shall be referred to and finally determined by UK courts in accordance with the laws of the United Kingdom. In the event of any potential legal dispute, there may be certain privileged data that we are prevented from disclosing.

18. How to Contact Us

For privacy queries, please contact us at privacy@penthousestays.com or at: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Biometric Policy

Last updated: 4 July, 2025

Why are you receiving this notice?

This biometric privacy notice explains how PenthouseStays, which is a trading name of Johnson Sachdeva LTD (will be referred to herein as ‘PenthouseStays’), and Persona, our third-party service provider, collects, uses, shares, retains, and destroys your Biometric Data when you use our services. “Biometric Data” includes: (i) “Biometric Identifiers,” which are data generated by measurements of your biological characteristics, such as your retina or iris scan, fingerprint, voiceprint, or a scan of your hand or face geometry; and (ii) “Biometric Information,” which is information based on a Biometric Identifier that can be used to identify you.

Please review this notice carefully. By agreeing to the collection of your Biometric Data, you consent to the collection, use, sharing, and retention of your Biometric Data as described in this notice.

What type of Biometric Data do we collect?

Face geometry.

Why do we collect it?

We may require Guests to provide a government-issued ID during the pre-check-in process to ensure their safety and the safety of others and to prevent fraud.

ID verification is the most effective and accurate way to verify Guests, to comply with other legal obligations regarding accommodating guests, and to protect the property of the Host (legitimate and vital interest of the Host).

ID verification is also necessary to avoid chargebacks.

How do we collect it?

With your consent, we use a third-party service provider, Persona, to handle ID verification on our behalf, including to securely capture a photo of your ID and your face. The service provider then compares the face geometry extracted from the photos of your ID and your face to securely verify your identity.

How do we use and share it?

Our third-party service provider securely collects your Biometric Data to verify your identity.

Our third-party service provider does not use your Biometric Data for any purpose other than to verify your identity.

Our third-party service provider does not share your Biometric Data with us or with any other third party. We can view a copy of the photographs of your ID and your face to help process your check-in, but we do not receive your Biometric Data.

How long do we retain your Biometric Data?

PenthouseStays can view a copy of your ID and selfie to help process your check-in, but we do not receive your Biometric Data.

Our third-party service provider, Persona, securely deletes your Biometric Data promptly after your ID has been verified.

What happens to your Biometric Data at the end of the retention period?

Our third-party service provider permanently erases your Biometric Data at the end of the retention period described above such that it cannot be recovered or reconstructed.

Additional Privacy Disclosures and Your Rights

For more information about how we collect, use, and share your personal information, as well as your rights and choices concerning our data practices, please review our Privacy Policy available at www.penthousestays.com/privacypolicy.

You are able to view Persona’s own privacy policy at any time, or during our check-in process when you accept Persona’s privacy policy, terms and conditions.