Data Processing Addendum

Last Updated: 13th July 2025

This Data Processing Addendum (“DPA”) forms part of our commitment to privacy and compliance with applicable data protection laws

1. Definitions

  • Controller: You, the party determining the purpose and means of processing

  • Processor: Us, Beyond Stays Group Limited


  • Data Subject: Individuals whose data is collected and processed

2. Scope of Processing

We process personal data solely to provide and support your use of our booking and accommodation services.

3. Data Categories

  • Guest contact details

  • Booking dates, preferences, and notes

  • Payment and identification details

3. Data Categories

  • Guest contact details

  • Booking dates, preferences, and notes

  • Payment and identification details

4. Sub-Processors

We may use trusted subprocessors. A current list is available in our Sub-Processors section.

5. Security and Confidentiality

We ensure that:


  • All personnel are subject to confidentiality obligations

  • Sub-processors follow industry-standard security measures

  • Data access is logged, controlled, and monitored

6. Assistance with Data Subject Rights

We assist you in fulfilling data subject requests, including access, correction, and deletion.

7. Data Breach Procedures

We will promptly notify you of any data breach affecting personal data we process on your behalf.

8. Termination

Upon termination of our relationship, we will delete or return all personal data, unless otherwise required by law.