Privacy Statement & The GDPR
Castle Cottage is registered with the Information Commissioners Office and seeks to ensure compliance with the General Data Protection Regulations (GDPR) 2018
Any personal data provided to Castle Cottage, is used only to make and manage accommodation bookings. This relates to reservations made directly by phone or email, via the 3rd party booking software embedded on our website (Freetobook) or via the 3rd party platform Airbnb.
Your Personal Data
As part of the booking process you will be asked for personal data which may typically include name, address, telephone number, email address along with additional guest data and when accessing a reservation through one of the 3rd party platforms, this may also include your IP address. This information is stored within our systems purely to process your booking.
Your data is retained after you have stayed with us, but no longer than is reasonable to comply with our legal obligations.
Data processed directly by third parties
Single & Joint Controllers
When making a direct reservation via telephone or email then Castle Cottage B&B is your Data Controller. When accessing Freetobook software to facilitate an online booking, then Castle Cottage B&B and Freetobook shall together operate as joint data controllers for the processing of your personal data. The storage of your data may be needed to perform the contract that you have with us as your accommodation provider or your booking platform. When accessing Airbnb to facilitate an online booking, then Airbnb is your data controller.
As a small business, we use minimal personal data from you and we take all reasonably practicable measures to protect any personal data. Only authorised members of the Castle Cottage B&B team may access your personal data.
Control of your Personal Information
You can email or write to us with a request to review your information.
- You can review any data to check it is accurate and appropriate.
- You can check how long any data is kept for.
- You can request for data to be deleted.
We may use your information for our legitimate interests, such as for administrative, fraud detection and legal purposes.
Your personal data will never be sold to a third party and is held purely for the purpose of making and the associated communications relating to a reservation. We do not carry out marketing mailers, and will only ever contact you when required in the administration of your reservation with us.
You may be asked to write a review – in the form of the visitors book, online, or via the feedback procedure of our 3rd party booking platforms. Reviews may be used for marketing purposes such as social media, websites and linked websites. However all reviews do not contain personal, identifying or contact data.