Privacy Policy

Policy Acceptance

Use of this website https://www.overnightly.com constitutes your legal agreement to the terms within this Privacy Policy and your acceptance of the policy is deemed to occur upon your first use of the website. You are required to read and accept this Privacy Policy when you make a booking with us.

Overnightly may change this policy from time to time by updating this page. On each visit to the website you should refer to this page to ensure that you are aware of and accept any changes.

Policy Statement

Overnightly recognises the trust you place in us when you share personal information with us. We are committed to being open, honest, and transparent with our use of personal data.

This privacy policy provides you with details of the personal information we collect when we engage with you, how we will use and look after your personal information, your privacy rights, and how the law protects you. We will take all reasonable steps to ensure that personal information is safeguarded and kept in accordance with data protection law.

By providing us with your data, you warrant that you are over 18 years of age.

About Us

Overnightly Limited is registered in England and Wales under company registration number 14467084. Our registered office address is Cawley House, 149-155 Canal Street, Nottingham, Nottinghamshire, United Kingdom, NG1 7HR.

Where we manage personal data, we identify as a Data Controller and recognise and act on our obligations under applicable data protection law.

For any issues relating to data protection the person responsible is Graham Lindley. You can contact us in relation to data protection matters by email to graham@overnightly.com.

What Personal Data Do We Collect?

Personal information is any information relating to an identified or identifiable individual. It does not include data where the identity has been removed (anonymous data). We may collect, use, store, and transfer different kinds of personal information about you when we engage with you. This may include:

• Identity Data: title, first name, last name, date of birth, or similar identifiers. This may include your social media user name.
• Contact Data: billing address, delivery address, email address, and telephone numbers.
• Financial Data: bank account and payment card details.
• Transaction Data: details about services you have purchased from us.
• Technical Data: includes IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on devices you use to access this website.
• Profile Data: your username and password, purchases or orders made by you, your interests, preferences, images and videos uploaded, qualifications and references, feedback, and survey responses.
• Geographical Data: information setting out your primary address to control use of location services.
• Usage Data: information about how you use our website and services.
• Marketing & Communications Data: your preferences in receiving marketing from us and our third parties and your communication preferences.

How Do We Collect Personal Data?

• Registration: Personal details provided during registration on our website are processed so that we can register you and respond to your communications with details of our services. Data is held on legitimate business interests grounds.
• Emails: Copies of emails sent to us and their personal information are held in line with this Privacy Policy as legitimate business interests.
• Newsletters: If you subscribe to newsletters, details of your name and email are stored on the basis of your consent. You may unsubscribe at any time via the unsubscribe link in emails.
• Telephone Calls: Calls may be recorded and relevant data retained for legitimate business needs or to fulfil contractual obligations.
• Other Interactions: You may provide data via forms, face-to-face, post, or social media. This includes when you: sign up for services; make enquiries; request information; use our services; engage on social media; enter a promotion or survey; contact us; or leave comments.
• Social Media: We use social media to engage with users and link to our Facebook, Pinterest, and Twitter pages. You should refer to their Privacy Policies (see links below).
  • Facebook: facebook.com/privacy/explanation
  • Pinterest: pinterest.com/en-gb/privacy-policy
  • Twitter: twitter.co.uk/privacy
• Reviews: We may seek reviews of our services. Reviews may be published, but your personal details will not be available to other users or third parties.
• Website Visits / Cookies: When visiting our website we do not attempt to identify you unless you specifically provide this to us. Technical data may be processed through use of cookies [see our Cookie Policy].

Special Categories & Children

We do not generally collect any special categories of personal data (such as details about race, ethnicity, religious or philosophical beliefs, sex life, orientation, political opinions, union membership, health, genetic, or biometric data, criminal convictions).

We do not market this website at those under 18 years old and do not knowingly request information from anyone under 16.

Information from Other Sources

We may, as necessary, obtain information about you from third parties to provide services, as permitted by law. This includes personal data from partners or third parties permitted by law or your permission to share your data, such as social media or review sites.

How We Use Your Data

UK data protection law requires a “legal basis” for processing personal data. The legal bases we rely on include:

• Performance of a contract we are about to enter into or have entered into with you
• Compliance with a legal or regulatory obligation
• Carrying out activities for our legitimate business interests
• Consent (e.g., for marketing). Where we rely on consent, you can withdraw at any time.

We use your data for purposes including registration, provision of our services, responding to communications, processing payments, improving the website, sending marketing communications (with consent), providing third-party statistical information, asking for feedback, and handling enquiries or complaints.

Our Legitimate Interests

When relying on legitimate interests, we will consider and balance any potential impact on you and your rights before processing data. Our interests include business management and operational efficiency.

Sharing Information & Disclosure

We do not share, sell, or distribute your data to third parties except as contractually agreed, required by law, or specified in this policy. We may disclose data when required to do so by law or to establish/defend our legal rights.

We may use Data Processors who must comply with the GDPR and only operate on our instructions.

Marketing

We may carry out direct marketing by email, phone, text, or post. Consent will be requested for marketing communications, and you may withdraw consent at any time by emailing graham@overnightly.com. Non-personally identifiable information may be provided to other third parties for marketing, advertising, or other uses.

External Links

We advise caution before clicking on any external web links, as these are outside our control and not governed by this Privacy Policy.

Social Media Platforms

Communication, engagement, and actions on social media are subject to both our terms and the policies of the platform. Please use care when engaging via social media, and do not share sensitive details there.

Payment Processing

Payments are handled by gateway providers such as Stripe.

Data Retention & Storage

We keep your personal information as long as needed to provide services or meet legal obligations, regularly reviewing and deleting data when no longer required. Data may be stored and processed by our website host (Wix.com), according to their policies: Wix Privacy Policy.

Data Security

We have appropriate security measures to prevent accidental loss, misuse, or unauthorised access to your data, but transmission via the web or email is at your own risk.

Rights of Data Subjects

You have the right to:

• Request access to data (subject access request)
• Request rectification of inaccurate data
• Request erasure of your data
• Request restriction of processing under certain circumstances
• Request transfer of your data (data portability)
• Object to processing, including profiling
• Not be subject to automated decision making

If you wish to invoke any rights, contact graham@overnightly.com. Generally, you will not have to pay a fee, but we may charge or refuse requests that are unfounded or excessive.

Data Breaches

We will report any data breach as required by the GDPR within 72 hours if data may have been compromised. High risk breaches will be directly communicated to affected users, and relevant breaches reported to the ICO.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Please review it regularly. Your continued use of the website implies acceptance of any changes.

Reporting Complaints

To raise a concern about the use of your data, contact graham@overnightly.com. Alternatively, you may raise a complaint to the Information Commissioner’s Office (ICO) at 0303 123 1113 or ico.org.uk/concerns/.