Mount House Whitby respects your privacy and is committed to protecting your personal information at all times.

This Privacy Notice sets out: (i) how we use your personal information; and (ii) your rights in relation to your information.

We act as the data controller in relation to the personal data which you provide to us when booking our accommodation.

Information we hold about you

It is necessary for us to hold and process certain personal information about you in order to enable us to process your accommodation booking. This may include the following information:

We may also be required to process such additional personal information about you as is necessary to enable us to manage our relationship with you and provide services from time to time.

How we use your information

In most cases, we will use the information we hold about you for the following purposes / activities and in accordance with the following lawful grounds for processing personal data:

Purpose / Activity Lawful grounds for processing
Processing your booking for your stay at our accommodation and registering with you as a guest. Necessary for the performance of our contract with you.

Necessary for our legitimate interests in administering our business and ensuring that the accommodation operates effectively.

Managing our relationship with you, including but not limited to responding to queries or complaints. Necessary for the performance of our contract with you.

Necessary for our legitimate interests in ensuring that we are able to (i) provide our guests with a good quality service; and (ii) respond to all queries and complaints raised by guests.

Managing and collecting all applicable payments, fees and/or charges. Necessary for the performance of our contract with you.

Necessary for our legitimate interests in processing payments made by guests and ensuring that we are able to recover all sums due to us.

Administering and protecting our business, our website and our online booking system. Necessary for our legitimate interests in running our business, ensuring the provision of administration and IT services, maintaining network security and preventing fraud.
Providing you with suggestions and recommendations about products, services and/or promotional offers that may be of interest to you. Necessary for our legitimate interests in developing and promoting our products / services and growing our business.

How long we retain your information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Third parties with whom we share your information

We may need to share your information with third parties who act on our behalf or provide services to us. We require all such third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

we may also require to disclose your information to the following categories of recipients: (i) our professional advisers, including but not limited to legal advisers; (ii) payment providers and other financial organisations; (iii) central and local government; (iv) regulatory authorities and (v) insurers.

Sources of information about you

We will collect personal information directly from you.

If your personal details change at any time, please inform us as soon as possible to ensure that all information held about you remains accurate and up to date.

International data transfers

We do not transfer your personal information outside the European Economic Area.

Your rights in relation your information

You have a number of rights in relation to your personal information which we respect and aim to uphold in everything we do. These include the following:

you can ask us for a copy of the information we hold about you and a description of how we use that information (i.e. subject access request);

if you believe any information we hold on you may be inaccurate or incomplete, and you are unable to correct this information yourself, you can require us to rectify these inaccuracies;

you can require us to erase your information in certain circumstances (i.e. the right to be forgotten);

where we process your information using automated means on the basis of your consent or to perform the agreement, you can request that we supply such information to another party (i.e. the right to data portability);

you can require us to restrict our use of your information or object to how it is used in certain circumstances;

where we process your information on the basis of our legitimate interests, you have the right to object to us processing your information in certain circumstances.

How to contact us

If you have any questions about how we use your information or you wish to contact us about your rights or if you have any complaints about our use of your information, please contact us at:

We will do our best to answer any question and resolve any complaint to your satisfaction. However, if you feel that we have not resolved your complaint, please note that you have the right to complain to the Information Commissioner’s Office.

Please note that this Privacy Notice may be updated by us from time to time.