Privacy Policy

Effective date: 26 October 2025

Data Controller: Wren Cottage

Email: wrencottagestay@gmail.com

1. Introduction

Wren Cottage (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or providing your personal data to us, you agree to the terms of this policy.

2. Information We Collect

We collect and process personal data that you voluntarily provide when you make an enquiry or booking. This may include:

• Your full name
• Email address
• Telephone number
• Postal address
• Details of other guests in your party (only with their consent)

We also collect limited technical information automatically when you use our website, such as anonymised data from Google Analytics (e.g., pages visited, browser type, and time spent on site). This data does not identify you personally.

We do not collect or process any special category (sensitive) personal data.

3. How We Use Your Information

We use your personal data to:

• Manage and confirm your booking or enquiry
• Communicate with you about your stay
• Comply with legal and accounting obligations
• Improve our services and website experience
• Send you occasional updates or offers (only if you have opted in)

We will never sell or share your personal data with third parties for marketing purposes.

4. Lawful Basis for Processing

• We rely on the following lawful bases under the UK GDPR:
• Contract: To process and manage your booking or enquiry.
• Consent: When you agree to receive marketing communications from us.
• Legal Obligation: To meet tax, accounting, or record-keeping requirements.
• Legitimate Interests: To improve our website and services using anonymised analytics data.

You can withdraw your consent for marketing at any time by emailing us at wrencottagestay@gmail.com.

5. Who We Share Your Data With

We only share limited personal data when necessary to fulfil our services, such as:

• Housekeeping or emergency contacts (name and phone number of the person who made the booking)
• We will only disclose data to others if required by law or to protect our legal rights.

6. Data Retention

We keep your personal data only as long as necessary:

• Booking and correspondence data: retained for up to 6 years to meet legal and tax obligations.
• Marketing data: retained until you unsubscribe or withdraw consent.
• Anonymised analytics data: retained for statistical purposes only.

After this period, your data is securely deleted or anonymised.

7. Storing and Protecting Your Data

Your personal data is stored electronically on secure systems with access restricted to the owners of Wren Cottage.

We take appropriate technical and organisational measures to protect your data, including:

• Secure password protection
• Encrypted connections
• Regular system updates and backups

If data is transferred outside the UK (for example, by Google Analytics or our booking platform), we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or other approved protections.

8. Payments

We request payment by secure bank transfer.
We do not store or process credit or debit card details on any of our systems.

9. Cookies

Our website uses cookies to improve your experience.

Essential cookies are necessary for the site to function.

• Analytics cookies (Google Analytics) help us understand how visitors use our website. These cookies are only set with your consent.

You can manage your cookie preferences through our cookie banner or your browser settings.
For more information about cookies, visit www.aboutcookies.org.

10. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your data (“right to be forgotten”).
• Restriction: Ask us to limit how we process your data.
• Data Portability: Request your data in a transferable format.
• Objection: Object to certain types of processing (e.g., direct marketing).
• Withdraw Consent: Withdraw your consent at any time.

To exercise any of these rights, please contact us at wrencottagestay@gmail.com.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk

11. Third-Party Links

Our website may include links to other websites.
We are not responsible for the privacy practices of those websites.
Please review their privacy policies before providing any personal data.

12. Updates to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website, and significant changes will be communicated where appropriate.

Last reviewed: 26 October 2025