Legal

Privacy Policy

Last updated: 13 May 2026

1. Who we are

Cumbrian Coast Cottages is operated by the host based in Allonby, Maryport, Cumbria. For the purposes of UK GDPR, we are the data controller for the personal information you give us. You can contact us at hello@cumbriancoastcottages.co.uk.

2. What information we collect

We collect only the data needed to run a holiday let cleanly: your name, email address, phone number, postal address, the dates of your stay, the number of guests and any dogs, dietary or accessibility notes you choose to share, and the messages you exchange with us. When you pay, your card details are entered directly into Stripe and never reach our servers. Stripe shares a payment confirmation, the last four digits of the card and the cardholder name with us for reconciliation.

3. How we use it

We use your data to confirm and manage your booking, to send pre-arrival information (key code, parking, wifi), to send a brief check-in and a post-stay review request, to keep accurate records for accounting and HMRC, and to comply with legal obligations. We do not use your data for advertising and we do not sell it.

4. Lawful basis

Our lawful basis under UK GDPR is contract (to deliver your booking), legitimate interest (to run the business, prevent fraud and respond to enquiries) and legal obligation (tax, accounting). Marketing emails are sent only if you opt in, on the basis of consent which you may withdraw at any time.

5. Who we share it with

We share data with a small number of trusted suppliers acting as data processors on our behalf: Stripe (payment processing), Resend (transactional email), Vercel (website hosting), and any housekeeping or maintenance contractor who needs limited information to service the cottage. We never share guest data with Airbnb, Booking.com or any other channel partner unless you originally booked through them.

6. Where your data lives

Most of our processors host data inside the UK or the EEA. Where data is transferred outside the UK or EEA (for example to US-headquartered Stripe), it is protected by appropriate safeguards including UK International Data Transfer Agreements and EU Standard Contractual Clauses.

7. How long we keep it

Booking records are kept for six years to comply with HMRC requirements, then deleted. Marketing consents are kept until withdrawn. Website analytics, where used, are kept for no longer than 26 months.

8. Your rights

You have the right to access your data, to correct it, to ask us to erase it, to restrict how we process it, to data portability, and to object to processing. To exercise any of these, email hello@cumbriancoastcottages.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

9. Cookies

See our separate cookies notice.

10. Changes

If we make material changes to this policy we will update the date at the top and, where appropriate, contact you by email.