Privacy policy

Last updated 5 October 2026

Who this covers

ELSEA runs elsea.biz, the stay app, and the property console. Email info@elsea.biz.

For a guest stay, and for the people a property invites into the console, the property decides why the data exists. ELSEA processes it to run the app. The list of companies that handle data for ELSEA is on Data processors.

This website

elsea.biz does not use an analytics cookie or a cookie banner. If you email info@elsea.biz, we keep the message so we can reply.

The stay app

The app is branded as the property. A guest opens it from a link or a room QR. A room link from a QR lasts 7 days on that phone.

A request can include:

• the room
• what was asked for
• an optional note
• a name, when the guest did not scan a room QR

The property sees that in the staff console. If the property has set notification addresses, the same details are emailed there.

A shared My Stay link stores the plan the guest chose to share. The link stops working after 7 days.

Where a property turns them on, a guest can send app feedback (a message, and an email if they add one) or a community post. Community text is checked before it is shown. Booking buttons can open the property’s own phone, WhatsApp, or website. Those services then apply their own terms.

App usage

The stay app counts pages and booking taps so the property can improve it. The same explanation, and an off switch, are on My Stay under App usage.

• Pages opened, and booking buttons tapped (call, WhatsApp, or reserve).
• The kind of phone, the operating system and country.
• A random id on the phone for 30 days, then a new one. It is only used to count devices.

The count does not include a name, a room, or anything typed. The property sees the totals. ELSEA processes them on Cloudflare. Turning the switch off stops counting on that phone and deletes that id.

Staff sign-in

People invited by a property sign in with an email and a password. We store the email, a hash of the password, the role, the property, the last sign-in, and a short-lived code when a browser is new. A sign-in code expires in 10 minutes. An invite link expires in 7 days. A password reset link expires in one hour.

How long it is kept

• Sign-in codes: 10 minutes.
• Invite links: 7 days. Password reset links: 1 hour.
• A room session: 7 days. A shared My Stay link: 7 days.
• The usage id on the phone: 30 days, or sooner when counting is turned off. Ids used to count devices are kept for 30 days.
• Usage totals stay so the property can read the charts.
• Requests stay so the property can work the queue.
• Email sent to info@elsea.biz stays so we can reply.

Your choices

Guests turn usage counting off on My Stay. For a stay, ask the property. For this website, email info@elsea.biz. You can also complain to the Information Commissioner’s Office at ico.org.uk.