Privacy Policy

1. Who We Are

The Cumbrian Hotel is a guesthouse at 81 Hornby Road, Blackpool, FY1 4QP ("we", "us", "our"). We are committed to protecting your personal data and processing it in a manner consistent with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

For any data protection queries, please contact us at cumbrianhotel@yahoo.com.

2. Data We Collect

We may collect and process the following personal data:

• Booking data: name, contact details (email, phone number), booking dates, room type, number of guests, and payment reference.
• Communications: messages or enquiries you send to us by email, phone, or contact form.
• Identification: photo ID presented at check-in (viewed but not retained).
• CCTV footage: recorded in public areas of the Hotel for security purposes.
• Website data: standard server logs including IP address and browser type. This site sets no marketing or profiling cookies. We use Vercel Speed Insights, a cookieless performance measurement service. The map on our location page loads from Google only if you choose to open it.

3. How We Use Your Data

We use your personal data to:

• Process and manage your booking and stay (contractual necessity).
• Communicate with you about your reservation or enquiry (legitimate interests).
• Comply with legal obligations (e.g., tax record-keeping).
• Maintain the safety and security of our premises via CCTV (legitimate interests).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Booking Platforms

Bookings made via third-party platforms such as Booking.com or FreeToBook are subject to those platforms’ own privacy policies. We receive only the booking information necessary to manage your stay. We encourage you to review the privacy policies of any platform you use to make your reservation.

5. How Long We Keep Your Data

Booking and financial records are retained for up to seven years to comply with HMRC requirements. Communications and enquiries are deleted within twelve months of resolution. CCTV footage is overwritten on a rolling cycle, typically within 30 days, unless required in connection with a security incident.

6. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data (where no legal obligation requires us to retain it).
• Restrict the processing of your data in certain circumstances.
• Object to processing based on our legitimate interests.
• Data portability where processing is based on consent or contract.

To exercise any of these rights, contact us using the details below. We will respond within one calendar month.

If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to guest data is restricted to staff who need it to carry out their duties.

8. Changes to This Policy

We may update this privacy policy from time to time. Any significant changes will be reflected on this page with an updated effective date.