What we collect
When you make an enquiry or create an account, we collect your name, email address, phone number, full UK home address, and your stay details (dates and party size). If you choose to save a passkey, we store the technical credential your device provides — never your fingerprint or face. Card payments, and any refundable security deposit, are processed securely by Square; we never see or store your card number. Before your stay we also collect, via a secure link in your confirmation email, the full name and nationality of everyone staying who is aged 16 or over — and, for guests who are not British or Irish, a passport/ID number and their next destination. This is a legal requirement for accommodation providers under the Immigration (Hotel Records) Order 1972.
Why we collect it & our lawful basis
We use your details to respond to your enquiry, manage your booking, contact you about your stay, and keep records required for our business and tax purposes. Our lawful bases are performance of a contract (your booking) and our legitimate interests in running the business and preventing fraud. Your home address is collected as a standard requirement for holiday-let bookings (guest identification and our terms).
Who we share it with
We do not sell your data. It is handled by our website host, our email provider, and our payment processor (Square — for card payments, including the refundable deposit) so we can store your booking, send confirmations and take payment. If you booked through a platform such as Airbnb or Vrbo, that booking is governed by their own privacy policies. We only disclose information where legally required.
How long we keep it
We keep booking records for as long as needed to run the business and meet UK tax and legal obligations (generally up to 6 years). You can delete your account at any time from your account page. When you do, we erase your login, contact details, messages, reviews and mailing-list entry; the booking and payment records we’re legally required to keep are anonymised — your dates and amounts remain, but your name and contact details are removed. The guest-register details required by the Immigration (Hotel Records) Order 1972 are kept for 12 months after your stay and then automatically deleted.
Your rights
Under UK GDPR you can ask to see the personal data we hold about you, correct it, or request its deletion. From your account page you can update your contact details and address, download a copy of all the data we hold about you, and delete your account (deletion works as described above). For anything else, please get in touch using the contact details on the site.
Contact
If you have any questions about your data, please contact us via the “Call to discuss” number shown on the booking page. This notice is provided for transparency and may be updated from time to time.
