In line with the GDPR regulations, sensitive information is kept for 1 week after your stay and then we will destroy this information. We never pass on information to third parties and we don't store card details on our own system.