Privacy policy

Last updated 2 November 2026

This policy explains what personal information Moa & Kin collects, why we collect it, who we share it with and the rights you have. We keep it in plain English and only collect what we need to run our service.

1. Who we are

Moa and Kin Ltd ("Moa & Kin", "we", "us") manages short-term rental properties in Bath, Bristol and London. We are the data controller for the personal information described in this policy.

Registered office: 5 Argyle Street, Bathwick, Bath BA2 4BA
Company number: 12895514, registered in England and Wales
Email: home@moaandkin.co.uk
Phone: 01225 690017

We handle personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who this policy covers

  • Property owners: owners who enquire about or use our management service.
  • Guests: people who book or stay in a property we manage, whether through our website or a booking platform.
  • Website visitors: anyone using moaandkin.co.uk or our booking site.
  • Suppliers: cleaners, contractors and other businesses we work with.

3. What we collect

Property owners

Your name, contact details, property address and details, ownership and consent information (such as lender, insurer or freeholder consent), bank details for payouts, invoices and statements, and our correspondence with you.

Revenue estimates and enquiries

When you ask for a revenue estimate or send an enquiry: your name, email, phone number, the property's address and details (such as bedrooms, finish and parking), any photos you upload, your plans for the property, and whether you'd like to hear from us with news and advice. If you have accepted analytics cookies, we also link your enquiry to the pages you viewed on our website, so we know what was useful to you.

Guests

Your name, contact details, booking dates and number of guests, payment status (card details are handled by the booking platform or payment provider, not stored by us), messages with our team, reviews, and identity verification details where we need to confirm who is staying.

Website visitors

Anything you send through our forms, plus technical information such as your IP address, browser, device and the pages you visit. See Cookies.

Suppliers

Business contact details, payment details and records of the work carried out.

4. How we use it, and our legal basis

We only use personal information where the law allows. For each purpose, the legal basis is shown alongside.

  • Replying to enquiries and preparing revenue estimatesLegitimate interests
  • Reviewing the property photos you upload with an AI tool, to help assess the finish for your estimate (our team makes the final judgement)Legitimate interests
  • Sending a few follow-up emails about your estimate (you can unsubscribe at any time)Legitimate interests
  • Understanding which pages and adverts lead to enquiriesConsent (analytics cookies)
  • Providing our management service to owners, including statements and payoutsContract
  • Managing bookings, check-in and guest communicationContract
  • Verifying guest identity and protecting properties from misuse or damageLegitimate interests
  • Arranging cleaning, maintenance and repairsContract / legitimate interests
  • Keeping financial and tax recordsLegal obligation
  • Handling complaints, damage claims and disputesLegitimate interests
  • Improving our website and servicesLegitimate interests
  • Sending marketing emailsConsent (you can opt out at any time)

Where we rely on legitimate interests, we have weighed our interests against your rights and only go ahead where they are not outweighed. We do not sell personal information, and we do not make decisions about you using automated processing alone.

5. Who we share it with

We share only what each party needs to do its job:

  • Booking platforms such as Airbnb, Booking.com and VRBO, to take and manage bookings.
  • Our software providers, including Hospitable (property and booking management), Squarespace (website and forms), Cloudflare (hosting for our booking site and internal systems), PriceLabs (market and pricing data), Anthropic (AI review of property photos for estimates), Xero (accounts) and our email and messaging services.
  • Analytics and advertising providers, such as Google and Meta, only where you have accepted analytics cookies.
  • Cleaners, contractors and trades, who receive only what they need, such as stay dates or access details.
  • Property owners, who receive booking information about their own property.
  • Professional advisers, such as our accountants, lawyers and insurers.
  • Authorities, where the law requires it or to prevent crime.

Our service providers act on our instructions and must keep your information secure.

If our business changes hands

If Moa and Kin Ltd, or all or most of its business or assets, is sold, merged or restructured, personal information may be transferred to the new owner as part of that transaction. The new owner may use it only for the purposes set out in this policy, and we will tell you if it is to be used in any other way.

6. Transfers outside the UK

Some of our providers and team members are based outside the UK, including in the United States and India. Where information is transferred outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

7. How long we keep it

  • Enquiries and revenue estimates that don't go ahead: 24 months from our last contact with you. After that, your personal details and photos are deleted and only anonymous statistics are kept.
  • Website analytics linked to an enquiry: up to 26 months.
  • Owner and financial records: six years after our agreement ends, as required for tax purposes.
  • Guest booking records: six years, for accounting and to handle any claims.
  • Identity verification details: deleted within 30 days of check-out, unless needed for an ongoing claim.

After these periods, we securely delete or anonymise the information.

8. Cookies

Cookies are small files stored on your device. Our website uses:

  • Essential cookies, which make the site and forms work. These cannot be switched off.
  • Analytics cookies, which help us understand how the site is used, including which pages and sections you view. If you then send us an enquiry, we link this to it. We only use these with your consent.
  • Third-party content, such as our YouTube video (which loads only when you press play) and our Google reviews widget. These providers may set their own cookies.

You can change your cookie choices using the cookie banner, or block cookies in your browser settings.

9. Your rights

You have the right to:

  • access the personal information we hold about you
  • ask us to correct anything inaccurate or incomplete
  • ask us to delete your information
  • ask us to restrict how we use it
  • object to our use of it, including for marketing
  • receive a copy of it in a portable format
  • withdraw your consent at any time, where we rely on it

Some rights only apply in certain situations. To use any of them, email home@moaandkin.co.uk. We'll respond within one month and won't charge a fee in most cases.

10. Complaints

If you're unhappy with how we've handled your information, please contact us first at home@moaandkin.co.uk and we'll do our best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top. If we make significant changes, we'll let you know where appropriate.