Legal

Privacy Policy

Last updated: March 2026

01 — Identity

Data Controller

Bstay SAS, registered in France (SIRET: 000 000 000 00000), whose registered office is located at Cannes, French Riviera, is responsible for processing your personal data as defined by Regulation (EU) 2016/679 (GDPR).

All enquiries relating to this policy may be directed to: privacy@bstay.com

02 — Data Collected

What We Collect

When you submit an enquiry or engage our services, we may collect the following categories of personal data: your full name, email address, telephone number, postal address, travel dates and preferences, and any information you voluntarily provide regarding your stay.

We do not collect sensitive categories of data as defined by Article 9 GDPR. We do not collect data from individuals under the age of 18.

When you visit our website, we may collect technical data such as your IP address, browser type, pages viewed, and visit duration through analytics tools. This data is processed in aggregated, anonymised form wherever possible.

03 — Purpose & Legal Basis

Why We Process Your Data

We process your personal data for the following purposes: responding to your enquiries and providing our rental services (legal basis: performance of a contract or pre-contractual steps); sending communications relevant to your booking (legal basis: legitimate interest); and improving our website and services (legal basis: legitimate interest).

We do not use your data for automated decision-making or profiling.

04 — Data Sharing

Who We Share Data With

We operate with strict discretion. Your personal data is never sold or rented to third parties. We may share your data with trusted service providers who assist in delivering our services — such as secure payment processors and hosted software providers — subject to appropriate data processing agreements.

Where required by law or a court order, we may disclose data to public authorities. In all other cases, your data remains confidential.

05 — Retention

How Long We Keep Your Data

Enquiry data is retained for 3 years from the date of last contact. Booking and contractual data is retained for 10 years in accordance with French commercial law. Technical and analytics data is retained for 13 months.

You may request deletion of your data at any time, subject to our legal retention obligations.

06 — Your Rights

Your Rights Under GDPR

You have the right to: access the personal data we hold about you; request rectification of inaccurate data; request erasure of your data (right to be forgotten); object to or restrict certain processing; and data portability.

To exercise any of these rights, contact us at privacy@bstay.com. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at cnil.fr.

07 — Cookies

Cookies

Our website uses strictly necessary cookies required for the site to function. We may also use analytics cookies to understand how visitors use our site, subject to your consent. No advertising or tracking cookies are used.

You may manage your cookie preferences through your browser settings at any time.

This policy may be updated periodically. Material changes will be communicated to registered clients. For questions, contact privacy@bstay.com.

Bespoke. Beyond. Bstay

Plan your stay

Our team will reach out to design a stay tailored to your expectations, down to the finest detail.

Get in touch