Privacy notice

Data controller: Site operator · alan.coylumweeks@nojunkplease.uk

We keep the personal information used by Coylumbridge Weeks to a minimum. We do not handle rental payments, identity documents or private conversations between owners and guests.

What we collect and why

Owner accounts: name, email address, approval status, temporary ownership-verification information and listing details. We use this to verify owners, provide the owner account and publish/manage listings. Our intended lawful basis is taking steps at the owner’s request and performing the service requested by the owner.

Rental enquiries: the name, email address and message you provide when contacting an owner. We use this to verify and moderate the enquiry and, if approved, pass it to the owner of the relevant listing. Our intended lawful basis is our legitimate interest in operating the requested introduction service and the enquirer’s request that we pass the enquiry to the owner.

Availability alerts: your email address, chosen month/year and the records needed to manage your alert and avoid duplicate emails. Alerts are sent only after email verification. Our lawful basis is consent, which can be withdrawn at any time using the unsubscribe link in every alert email.

Security/administration: short-lived authentication tokens, sessions and non-content audit records are used to secure and administer the service.

Who receives personal information

An approved rental enquiry is disclosed to the owner associated with that listing. We also use service providers necessary to run the site: Netlify for hosting/server-side application execution, Neon for the PostgreSQL database, Resend for transactional email, and Cloudflare for domain/DNS and related infrastructure. These providers process information under their own contractual terms and data-processing arrangements.

International transfers

Some service providers or their subprocessors may process information outside the UK. Where this happens, the site operator must rely on an applicable UK transfer mechanism provided through the relevant service agreement, such as adequacy regulations or approved contractual safeguards. The operator reviews provider data-processing terms as part of the service’s compliance records.

How long we keep information

• Unverified enquiries: up to 7 days.
• Forwarded enquiries: up to 30 days after forwarding.
• Rejected enquiries: up to 7 days after rejection.
• Pending owner registrations with no listing: normally up to 30 days.
• Temporary owner verification notes: erased when the owner is approved.
• Approved owner accounts/listings: while needed to provide the service, or until the owner deletes the account.
• Availability alerts: until the requested month ends or the subscriber unsubscribes; expired alerts are removed after a short administrative period.
• Administrative audit records: up to 365 days and designed not to contain message content or email addresses.

Old records are removed automatically in line with these retention periods.

Your rights

Depending on the circumstances, UK data-protection law gives you rights to ask for access to your personal information, correction, erasure, restriction or objection, and to withdraw consent where consent is the lawful basis. Owners can delete their account directly from the owner dashboard. For any other request, contact alan.coylumweeks@nojunkplease.uk. We may need enough information to verify that the request relates to you.

You can also complain to the UK Information Commissioner’s Office if you are unhappy with how your information has been handled.

Cookies and tracking

The site does not use advertising or behavioural-analytics cookies. Signed-in owners/admins receive a strictly necessary session cookie used to keep the account signed in securely.

Automated decisions

The service does not use solely automated decision-making with legal or similarly significant effects. Owner, listing and enquiry approvals are administrative decisions made by the site administrator.

Changes to this notice

This notice should be reviewed whenever the data collected, providers used or purposes of processing change.