Privacy Policy

1. What data we collect

We collect personal data only when you provide it directly or when standard site analytics are active. Specifically:

• —Contact form submissions: name, email address, and message content when you write to us.
• —Usage data: pages visited, time spent, referral source — collected via analytics cookies where consent is given.
• —Cookie preferences: your consent choices, stored locally in your browser.
• —Device and browser data: browser type, approximate location, screen resolution — collected automatically through standard web technologies.

We do not collect payment information, government IDs, or any sensitive personal categories.

2. Legal basis for processing

• —Consent: analytics and advertising cookies are only active if you've agreed to them.
• —Legitimate interest: responding to enquiries you've submitted through our contact form.
• —Legal obligation: retaining records where required by applicable law.

3. How we use your data

• —To respond to messages and reservation enquiries you send us.
• —To understand how the site is being used so we can improve it.
• —To show relevant advertising where applicable, if you've consented to advertising cookies.
• —To maintain site security and prevent fraud.

We do not sell personal data. We do not use it for automated decision-making.

4. Third-party sharing

We may share limited data with the following categories of third party where relevant:

• —Analytics providers: aggregated, anonymised usage data where consent is given.
• —Advertising platforms: where advertising cookies are enabled and you've consented.
• —Legal authorities: only when required by law or to protect legal rights.

We do not share contact form data with any third party for marketing purposes.

5. Data retention

We hold personal data only as long as necessary:

• —Contact form messages: up to 12 months unless an ongoing relationship requires longer.
• —Analytics data: as per the retention settings of the analytics provider used.
• —Cookie preferences: stored locally in your browser until cleared by you.

6. Data protection measures

• —The site is served over HTTPS, encrypting data in transit.
• —Access to any stored data is restricted to authorised individuals only.
• —In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

7. Your rights

• —Right to access: request a copy of the personal data we hold about you.
• —Right to rectification: ask us to correct inaccurate data.
• —Right to erasure: request deletion of your personal data where there is no overriding legal reason to retain it.
• —Right to data portability: receive your data in a structured, machine-readable format.
• —Right to object: object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, use our contact page. We will respond within 30 days.