Privacy Policy (UK GDPR Compliant)

Last updated: [November 2025]

1. Introduction

We value your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit or use our website: princesstreettownhouse.lodgify.com

This Policy complies with:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018

By using our website or booking a stay with us, you agree to the processing of your data in accordance with this Policy.

2. Data Controller

Controller: Princes Street Townhouse
Address: 11A Princes Street, Bath, BA1 1HL, United Kingdom
Email: bookings@princesstreettownhouse.com

If you have questions about this Policy or wish to exercise your data rights, please contact us using the details above.

3. Data We Collect

3.1 Data You Provide to Us

We collect personal data when you make an enquiry, submit a booking, or communicate with us. This may include:

• Full name
• Email address
• Telephone number
• Billing address
• Booking details (arrival/departure dates, number of guests, special requests)
• Payment information (processed securely by our payment provider)
• Information submitted via enquiry, booking, or contact forms

3.2 Data Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited, time spent, and usage patterns
• Cookies and tracking data (see Section 9)

3.3 Data from Third Parties

We may receive personal data from:

• Lodgify (our website and booking system provider)
• Payment processors (e.g., Stripe, PayPal)
• Analytics providers (e.g., Google Analytics)
• Booking platforms (e.g., Airbnb, Booking.com, Expedia, VRBO) where applicable
• Marketing partners (if you consent to marketing communications)

4. Legal Bases for Processing

We process your personal data based on one or more of the following legal grounds:

• Contractual necessity – to process and manage your booking
• Legal obligation – for accounting, taxation, and regulatory compliance
• Legitimate interests – to improve our website and services
• Consent – for marketing emails or optional cookies

We do not rely on the “vital interests” legal basis.

5. How We Use Your Data

We use your personal data to:

• Process and confirm bookings
• Take payments and issue receipts
• Manage customer enquiries and communication
• Maintain records for tax and accounting purposes
• Improve website functionality and user experience
• Conduct analytics to optimise our services
• Send marketing emails (only with your explicit consent)

We do not use your personal data for automated decision making or profiling.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this Policy.

• Booking and financial records: stored for 6 years to comply with UK tax law
• General communication data: retained for up to 12 months
• Marketing data: retained until you withdraw consent

After these periods, data is securely deleted or anonymised.

7. Data Sharing

We do not sell your personal data.

We may share personal data with trusted third parties who help us operate our business:

• Lodgify – website hosting and booking management
• Payment processors (e.g., Stripe, PayPal)
• Analytics providers
• External booking platforms (if you book via Airbnb, Booking.com, VRBO, etc.)
• Professional service providers (e.g., accountants)
• Legal authorities, where required by law

All third parties process your data in compliance with UK GDPR and are bound by contract to protect your information.

8. International Data Transfers

If your personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other legally compliant transfer mechanisms

Lodgify and some analytics providers may process data internationally using these safeguards.

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Enable essential website functions
• Improve website performance
• Analyse usage behaviour
• Deliver personalised content and marketing (only with consent)

When you first visit our website, you will be presented with a cookie consent banner where you can accept, reject, or customise your cookie preferences.

You can change or withdraw your consent at any time.

You may also disable cookies through your browser settings, but this may affect website functionality.

10. Your Privacy Rights (UK GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing based on legitimate interests
• Request data portability
• Withdraw consent at any time (for cookies, marketing, etc.)
• Lodge a complaint with a supervisory authority

To exercise these rights, email: bookings@princesstreettownhouse.com.

Supervisory Authority

You can also submit a complaint to:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk

We may require proof of identity before responding to a rights request.

11. Data Security

We use appropriate technical and organisational measures to protect your personal data from:

• Loss
• Misuse
• Unauthorised access
• Disclosure
• Alteration
• Destruction

Lodgify and our payment processors also implement industry-standard security measures.

12. Children’s Privacy

Our website and services are not intended for children under 16.
We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us immediately.

13. Updates to This Policy

We may update this Privacy Policy from time to time.
The “Last updated” date at the top of this page will be revised accordingly.

Continued use of our website after changes means you accept the updated Policy.