PRIVACY POLICY
MOUNT HOUSE WHITBY
GDPR PRIVACY NOTICE FOR ACCOMMODATION BOOKINGS
Introduction
Mount House Whitby respects your privacy and is committed to protecting your personal information at all times.
This Privacy Notice sets out: (i) how we use your personal information; and (ii) your rights in relation to your information.
We act as the data controller in relation to the personal data which you provide to us when booking our accommodation.
Information we hold about you
It is necessary for us to hold and process certain personal information about you in order to enable us to process your accommodation booking. This may include the following information:
- Name
- Email address
- Home address
- Telephone number
- Payment information
- Names of any guests travelling with you
We may also be required to process such additional personal information about you as is necessary to enable us to manage our relationship with you and provide services from time to time.
How we use your information
In most cases, we will use the information we hold about you for the following purposes / activities and in accordance with the following lawful grounds for processing personal data:
Purpose / Activity | Lawful grounds for processing |
Processing your booking for your stay at our accommodation and registering with you as a guest. | Necessary for the performance of our contract with you.
Necessary for our legitimate interests in administering our business and ensuring that the accommodation operates effectively. |
Managing our relationship with you, including but not limited to responding to queries or complaints. | Necessary for the performance of our contract with you.
Necessary for our legitimate interests in ensuring that we are able to (i) provide our guests with a good quality service; and (ii) respond to all queries and complaints raised by guests. |
Managing and collecting all applicable payments, fees and/or charges. | Necessary for the performance of our contract with you.
Necessary for our legitimate interests in processing payments made by guests and ensuring that we are able to recover all sums due to us. |
Administering and protecting our business, our website and our online booking system. | Necessary for our legitimate interests in running our business, ensuring the provision of administration and IT services, maintaining network security and preventing fraud. |
Providing you with suggestions and recommendations about products, services and/or promotional offers that may be of interest to you. | Necessary for our legitimate interests in developing and promoting our products / services and growing our business. |
How long we retain your information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Third parties with whom we share your information
We may need to share your information with third parties who act on our behalf or provide services to us. We require all such third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
we may also require to disclose your information to the following categories of recipients: (i) our professional advisers, including but not limited to legal advisers; (ii) payment providers and other financial organisations; (iii) central and local government; (iv) regulatory authorities and (v) insurers.
Sources of information about you
We will collect personal information directly from you.
If your personal details change at any time, please inform us as soon as possible to ensure that all information held about you remains accurate and up to date.
International data transfers
We do not transfer your personal information outside the European Economic Area.
Your rights in relation your information
You have a number of rights in relation to your personal information which we respect and aim to uphold in everything we do. These include the following:
you can ask us for a copy of the information we hold about you and a description of how we use that information (i.e. subject access request);
if you believe any information we hold on you may be inaccurate or incomplete, and you are unable to correct this information yourself, you can require us to rectify these inaccuracies;
you can require us to erase your information in certain circumstances (i.e. the right to be forgotten);
where we process your information using automated means on the basis of your consent or to perform the agreement, you can request that we supply such information to another party (i.e. the right to data portability);
you can require us to restrict our use of your information or object to how it is used in certain circumstances;
where we process your information on the basis of our legitimate interests, you have the right to object to us processing your information in certain circumstances.
How to contact us
If you have any questions about how we use your information or you wish to contact us about your rights or if you have any complaints about our use of your information, please contact us at: ruthdenison@outlook.com.
We will do our best to answer any question and resolve any complaint to your satisfaction. However, if you feel that we have not resolved your complaint, please note that you have the right to complain to the Information Commissioner’s Office.
Please note that this Privacy Notice may be updated by us from time to time.