Privacy Notice

Last updated 9 July 2026

This notice explains how Ownlet collects, uses, and protects personal data when you enquire with us or book a stay through an Ownlet-built property site. It applies to ownlet.co.uk and to booking applications we build and operate for property owners (for example ownlet-app.web.app and any client domain running on Ownlet).

Who we are

Ownlet is a trading name of Equal Design, operated by Matt Shepherd, a sole trader based in Lancashire, UK. For data protection purposes, Equal Design is the data controller for enquiries made through this site, and acts as a data processor on behalf of individual property owners for guest bookings made through their Ownlet-built apps — the property owner is the controller of their own guest data.

Contact: hello@ownlet.co.uk

What we collect

• Enquiry form: name, email address, number of properties, current booking platform, and any message you send us.
• Guest bookings: full name, email address, phone number, number of guests, and stay dates. Payment card details are collected and processed directly by Stripe — they never reach our servers.

Why we process it

• Enquiries — to respond to your message. Lawful basis: legitimate interest in answering business enquiries.
• Bookings — to create and manage a reservation, take payment, and let the property owner contact you about your stay. Lawful basis: performance of a contract with you.

Who we share it with

• Stripe — processes payment. See Stripe's privacy policy.
• Google Firebase (Firestore & Cloud Functions) — stores booking records and runs the booking application. Data may be processed on servers outside the UK/EEA under Google's standard contractual clauses.
• The property owner you are booking with, who needs your details to prepare for your stay.

We do not sell personal data, and we do not use it for third-party advertising.

How long we keep it

Enquiry data is kept for up to 12 months. Booking records are kept for as long as the property owner's account is active, and for a reasonable period afterwards to meet accounting and tax obligations (typically 6 years).

Cookies

This site does not use tracking or advertising cookies. Stripe sets cookies during payment strictly for fraud prevention, which is treated as strictly necessary and does not require consent under UK PECR rules.

Your rights

Under UK GDPR you have the right to access, correct, or delete your data, restrict or object to processing, and request a copy of your data in a portable format. To exercise any of these, email hello@ownlet.co.uk. If you booked a stay, you may also need to contact the property owner directly, as they control your booking data.

You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.