Privacy notice
What Aroundstay and the Hudson app keep about you, why, who sees it, and how to change or delete it.
Who we are
Aroundstay (www.aroundstay.com) and the Hudson app are run by Trance Holding Company Ltd, a company registered in England and Wales, company number 17251309. Our registered office is Blackpool Enterprise Centre, 291–305 Lytham Road, Blackpool FY4 1EW. We are the data controller for the personal data described on this site. You can reach us at [email protected].
The short version
You can look around the Aroundstay website without telling us who you are. To use Hudson, the butler, in the app, or to book, you sign in with your email address. We then keep your email address, the name you give us, and the preferences and searches you choose to save, so that Hudson can remember them for you. When you book, your card is charged by our booking partner through Stripe; your card details go straight into Stripe's secure form and never pass through us. Voice clips you record for Hudson are turned into text on our own server and deleted straight away. We do not sell or rent personal data, and we do not run advertising or tracking on the site or in the app. You can delete your account at any time, in the app or on the website.
What we collect, and why
| What | When | Why, and our legal basis |
|---|---|---|
| Your email address, the name you give us and, if you give it, your mobile number | When you sign up or sign in | To sign you in with a code or link sent by email, to address you by name and to contact you about a booking. Performance of our agreement with you. |
| Voice clips | Only while you hold the talk button in Hudson | To turn what you say into text so Hudson can answer. The clip is processed on our own server, is not sent to anyone else, and is deleted as soon as it has been turned into text; only the text is kept, as part of your conversation. Performance of our agreement with you; you choose whether to speak or type. |
| Who invited you | When you join through an introducer's code, link or QR code | So that the introducer can be paid their share of our commission on your stays. The introducer sees counts and money only, never who you are, where you go or when. If you scan an introducer's QR code on a phone, we note the code, the time, the type of phone and your internet address for up to 7 days, so that the introducer is credited when you first open the app; then it is deleted. Performance of our agreement with the introducer and our legitimate interest in paying them correctly. |
| Your travel preferences (for example beach, quiet, golf, budget, kind of place), notes you add, and your conversations with Hudson | When you set them on your profile or tell Hudson | To shortlist hotels that fit what you have told us, on any country we cover. Your consent, which you give on the profile page and can withdraw at any time by deleting your profile. |
| Saved trips: the hotels and places you add, and your dates | When you save a trip while signed in | So your trip is there when you come back, on any device. Performance of our agreement with you. If you are not signed in, your trip stays in your own browser and never reaches us. |
| Booking records: the name, email address and phone number the booking is made in, the provider, their reference, the hotel or activity, dates, price and cancellation terms | When you book through a provider from our pages | To make the booking, show it on your My bookings page and answer questions about it. Performance of our agreement with you, and our legal duty to keep accounting records. Card details go to Stripe, the payment provider, not to us. |
| Technical data: your IP address, browser and the pages requested | Every visit | To keep the site secure and working, in server logs and through Cloudflare, which protects the site. Our legitimate interest in running a safe service. |
| Business contact details of hotels and venues | Gathered from public sources such as OpenStreetMap and the venue's own website | To describe places to guests and to offer hotels a listing. Our legitimate interest in running the service. A hotel or venue can ask us to correct or remove its details at any time. |
Hudson, the butler
Hudson is a software assistant. When you talk to him, the text of the conversation and your saved preferences are sent to an artificial intelligence service provider to compose his reply. The facts about hotels and places in his shortlists come from our own data, not from that provider. We do not use your conversations to train models, and neither does the provider under our agreement with them. If you speak to Hudson instead of typing, the recording is turned into text on our own server and deleted at once; Hudson's spoken replies are made on our own server too.
The Hudson app
The Hudson app for Android, published on Google Play under the developer name Aroundstay, is the same service as www.aroundstay.com/hudson in an app, and this notice covers it. The app asks for one permission, the microphone, and uses it only while you hold the talk button. It does not read your location, contacts, photos or files, it shows no advertising, and it contains no analytics or tracking code. What it keeps on your phone (the conversation on that phone and your currency choice) stays on the phone until you clear it or remove the app.
Who we share data with
- Booking providers, when you choose to book: the hotel provider Nuitée Travel Limited (LiteAPI) and, where offered, tour, ticket and car hire companies named on the page at the time. They receive the details needed to make your booking and become responsible for that booking under their own terms and privacy notice. Your card is charged by Nuitée through its payment provider, Stripe, which receives your card details directly in its own secure form.
- Service providers who work for us: Cloudflare (site security and delivery), Resend (sending our emails), our hosting provider, and an artificial intelligence service provider for Hudson's replies. They process data only on our instructions.
- Nobody else, unless the law requires it. We do not sell or rent personal data and we do not share it with advertisers.
Where your data is kept
Our servers are in the European Union. Some service providers are based in the United States; where that is the case we rely on the UK's data bridge or standard contractual clauses so that your data has the same protection.
How long we keep it
- Your account, preferences, conversations and saved trips: until you delete them or your account, or after three years without a sign-in.
- Booking records: six years after the stay, for accounting and to deal with any dispute.
- Voice clips: deleted as soon as they have been turned into text, within seconds.
- Server logs: 30 days.
- Hotel and venue business details: while we describe that place on the site.
Deleting your account
You can delete your account yourself at any time. In the Hudson app or on the website, open My bookings and choose Delete my account at the bottom of the page, or go straight to crm.aroundstay.com/me/delete (you will be asked to sign in first). Your account, preferences, conversations with Hudson and saved searches are deleted straight away. Records of bookings you have made are kept for six years after the stay, as accounting law requires, and are no longer linked to an account. If you cannot sign in, email [email protected] from the address you used and we will delete it for you. More detail: Delete your account.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, object to how we use it, and withdraw consent where we rely on it. Signed-in guests can see, change and delete their preferences and conversations on their My bookings page, and delete their whole account, without asking us. For anything else, email [email protected] and we will answer within a month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
For visitors and partners in Thailand (PDPA)
If you are in Thailand, Thailand's Personal Data Protection Act B.E. 2562 (2019) applies to what we do with your personal data, alongside the UK and EU rules above. This section says the same things in the PDPA's terms.
Data controller. Trance Holding Company Ltd, registered in England and Wales, company number 17251309, Blackpool Enterprise Centre, 291–305 Lytham Road, Blackpool FY4 1EW, United Kingdom. Contact for anything about your data: [email protected].
What we collect and why. The email address you sign in with, the trips and searches you save, the hotel bookings you make through our pages, and, if you are an organiser or introducer working with us, your organisation's name, website, contact address and the bank details you give us for payouts. We use it to run the service you asked for, to pay what we owe you, and to keep the site safe; the legal bases are the performance of a contract with you, our legitimate interest in running and protecting the service, and legal obligations such as tax and accounting records. We do not sell personal data and we do not use it for marketing you did not ask for.
Who receives it. Our booking partner Nuitée receives the details a hotel needs for a booking. Our email and hosting providers process data on our instructions. Organisers and introducers never see who booked, where or when: they see counts and money only.
Where it goes. Our servers are in the European Union and our company is in the United Kingdom, so your data leaves Thailand. Both places have data protection laws the PDPA treats as adequate, and we protect the data the same way wherever it is held.
How long. Sign-in and trip data for as long as you use the service and up to three years after your last visit; booking and payout records for the period tax and accounting law requires, seven years; abuse logs for ninety days.
Your rights under the PDPA. You can ask for access to your data, a copy of it, correction, deletion, restriction of its use, its transfer to you, and you can object to processing based on our legitimate interests and withdraw any consent you gave. Write to [email protected] and we answer within thirty days. If you are not satisfied you can complain to the Personal Data Protection Committee of Thailand.
Introducers and organisers in Thailand. You work with us as an independent business, not as our employee, and you are responsible for your own tax on what we pay you. We keep the payout records the law requires and give you a statement of every payment.
Children
Aroundstay is for adults making travel plans. We do not knowingly collect data from anyone under 18.
Changes
If we change this notice in a way that matters we will show the new date at the top and, for signed-in guests, mention it on the site.
Last updated 13 October 2026.