Privacy Policy

Last updated: 7 November 2025

1. Who We Are

STAYWAY LIMITED (company number 04442891) is the data controller responsible for your personal information. We are registered in England and Wales.

Registered office:
7 Christie Way, Christie Fields, Manchester, M21 7QY

Contact address:
274 Manchester Rd, Audenshaw, Manchester M34 5GL, United Kingdom

Privacy enquiries:
Email: info@stayway.co.uk

2. What We Collect and How

Information You Provide

When you submit an enquiry form on stayway.co.uk, we collect:

Your name and contact details (email, phone number)
Business information you provide
Any other information you choose to include in your enquiry

Technical Information

When you visit our site, our hosting provider automatically collects:

IP address
Browser type and version
Device information
Pages visited and time spent
Referring website

This data is collected through standard web server logs for security and operational purposes.

3. Why We Use Your Information and Our Legal Basis

We process your personal data on the following legal bases:

Legitimate Interests

Responding to enquiries: To assess your investment needs and provide relevant information about SME investment opportunities
Security and fraud prevention: To protect our systems and detect abuse
Service improvement: To understand how our site is used and improve user experience

Consent

Sharing with partners: If you tick the consent checkbox on our form, we may share your enquiry with trusted investment partners who may be able to assist you. This sharing is entirely optional and only occurs with your explicit permission.

Legal Obligation

Complying with legal and regulatory requirements, including financial services regulations
Responding to lawful requests from authorities

4. Who We Share Your Information With

We share your personal data only as necessary with:

Service Providers

Netlify: Our form submission processor
Microsoft Outlook: Our email system where enquiries are delivered
Hosting and CDN providers: To deliver our website securely
IT and security providers: For system maintenance and protection

Professional Advisers

We may share information with lawyers, accountants, auditors, and insurers where necessary for professional advice or legal compliance.

Investment Partners (With Your Consent Only)

If you tick the consent checkbox on our enquiry form, we may share your information with investment partners, including private equity firms, venture capital firms, and other SME investment companies in the UK who may be able to assist with your investment needs.

Important: These partners act as independent data controllers. Once we share your information with them, they are responsible for how they use it under their own privacy policies. You can withdraw your consent at any time by emailing info@stayway.co.uk, but this will not affect any sharing that has already occurred.

Legal Requirements

We may disclose your information to comply with legal obligations, enforce our terms, or protect rights, property, or safety.

5. International Transfers

Some of our service providers (such as Netlify and Microsoft) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place:

EU-US Data Privacy Framework adequacy decisions
UK International Data Transfer Agreement (IDTA)
Standard Contractual Clauses approved by the UK ICO

You can request copies of these safeguards by contacting info@stayway.co.uk.

6. How Long We Keep Your Information

We retain your personal data for the following periods:

Enquiry information: 24 months from your last contact with us, or longer if an ongoing relationship develops
Technical logs: 12 months for security and operational purposes
Legal and regulatory records: 6 years where required by law

After these periods, we securely delete or anonymise your information unless we have a legal obligation to retain it longer.

7. Security

We take the security of your personal data seriously. Our measures include:

TLS encryption for data in transit
Multi-factor authentication (MFA) for system access
Role-based access controls (least-privilege principle)
Regular security patching and updates
Secure data storage with access logging
Regular security assessments

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

8. Your Rights

Under UK data protection law, you have the following rights:

Access: Request a copy of the personal data we hold about you
Rectification: Ask us to correct inaccurate or incomplete data
Erasure: Request deletion of your data in certain circumstances
Restriction: Ask us to limit how we use your data
Objection: Object to processing based on legitimate interests
Data portability: Receive your data in a machine-readable format
Withdraw consent: Where we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us at info@stayway.co.uk. We will respond within one month.

Right to Complain

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Children

Our services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@stayway.co.uk, and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a new "Last updated" date. Significant changes will be notified via email or prominent notice on our website.

We encourage you to review this policy periodically.