Privacy
Privacy Policy
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and how we use and protect it.
1. Who We Are
Lakehayes Holiday Cottages is owned and operated by Kate and Matt, of Lakehayes Farm, Tatworth, Chard, Somerset TA20 2SH. For any privacy-related queries, please contact us at hello@lakehayescottages.co.uk.
We are the data controller for the personal data collected through this website.
2. What Data We Collect
We collect the following personal data when you make a booking or contact us:
- Contact details: name, email address, phone number.
- Booking details: arrival and departure dates, property, number of guests.
- Payment information: payment is processed by Stripe. We do not store card numbers or bank details — Stripe handles all payment data in accordance with PCI DSS standards.
- Communications: the content of any emails or enquiries you send us.
We do not collect any special category personal data.
3. Why We Collect It (Legal Basis)
- To fulfil a contract: we need your contact and booking details to confirm, manage, and administer your booking (Article 6(1)(b) UK GDPR).
- Legal obligation: we may need to retain certain records for tax and accounting purposes (Article 6(1)(c) UK GDPR).
- Legitimate interests: we may contact you about your booking or respond to your enquiries (Article 6(1)(f) UK GDPR).
4. How We Use Your Data
- To confirm and manage your booking and send you booking-related communications (confirmation, balance reminders, check-in details).
- To respond to enquiries and contact requests.
- To comply with our legal and regulatory obligations.
We do not use your data for marketing purposes without your explicit consent, and we do not sell or share your data with any third party for their own marketing purposes.
5. Third Parties
We share data with the following service providers solely to operate our booking system:
- Stripe — payment processing. Stripe Privacy Policy.
- Resend — transactional email delivery. Resend Privacy Policy.
- Cloudflare — website hosting and database. Cloudflare Privacy Policy.
All processors are contractually bound to handle data in accordance with UK GDPR.
6. Data Retention
We retain booking records (including contact details) for 7 years after the booking date, in line with HMRC requirements. Enquiry data is retained for up to 2 years. You may request deletion of your data at any time (subject to our legal retention obligations).
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correction of inaccurate data.
- Erasure of your data (where no legal retention obligation applies).
- Restriction of processing in certain circumstances.
- Portability of your data in a machine-readable format.
- Object to processing based on legitimate interests.
To exercise any of these rights, please email hello@lakehayescottages.co.uk. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).
8. Security
We take reasonable technical and organisational measures to protect your personal data. Our website is served over HTTPS and all data is stored on Cloudflare's secure infrastructure. Card details are never transmitted to or stored on our servers.
9. Cookies
We use a small number of cookies. Please see our Cookie Policy for details.
10. Changes to This Policy
We may update this policy from time to time. The date of the most recent revision is shown at the top of this page. We recommend checking back periodically.