Privacy & Data Protection Policy

Effective Date: 1st July 2025 Last Updated: 1st July 2025 

At Waterside Luxury Retreat, we are committed to protecting your personal data and respecting your privacy.

This policy outlines how we collect, use, store, and protect your data in line with the UK General Data Protection Regulation (UK GDPR).

1. What Information We Collect When you interact with our website or make a booking, we may collect: Contact details (name, email address, phone number) Booking information (dates, number of guests, property booked) Payment details (processed securely by our payment provider; we do not store card data) Technical data (IP address, browser type, and cookies) Communication data (emails, messages sent through forms)

2. How We Use Your Information We use your data to: Process and confirm your bookings Communicate with you about your stay Provide customer support Comply with legal obligations (e.g. record-keeping) Improve our website and services We do not sell your data to third parties.

3. Lawful Basis for Processing We only process your data when: It is necessary for fulfilling a contract (e.g., a booking) You have given consent (e.g., subscribing to marketing) We are required by law It is in our legitimate interests (e.g., fraud prevention)

4. Sharing Your Data We may share your data with: Service providers (e.g., payment gateways, booking software) Professional advisors (accountants, legal services) Regulatory bodies if legally required All third parties must respect the security of your data and comply with data protection laws.

5. Data Retention We retain your data only as long as necessary: Booking records: kept for 6 years for legal compliance Marketing data: kept until you opt out Cookies: see our separate Cookie Policy

6. Your Rights Under UK GDPR, you have the right to: Access the personal data we hold about you Request correction of inaccurate data Request deletion where there’s no valid reason to keep it Object to or restrict processing Withdraw consent at any time Lodge a complaint with the Information Commissioner's Office (ICO) To exercise your rights, please contact us at: liz@watersideluxuryretreat.co.uk

7. Data Security  We implement appropriate technical and organisational measures to protect your data, including: Secure servers SSL encryption Restricted access to data

8. Updates to This Policy We may update this policy periodically. The latest version will always be available on this page.