A Note on Privacy
A short, plain-spoken note from the Trust on what these pages collect, what the hotel keeps in respect of bookings, and how a guest may ask to be forgotten by the standing register.
What the website does
These pages are static, plain-text in their writing, and run without trackers, advertising scripts, social-network embeds, or analytic suites. The Trust does not keep an account of who has read which page, does not pass logs to third parties, and does not retain visitor records beyond seven days for the purpose of keeping the site available against attack. No cookie is set by these pages by default; a single technical cookie may be set to remember a guest’s preference of light or dark display, where that choice is made.
What the booking record holds
Where a booking is made — by letter, by telephone, or by email — the duty observer enters a short standing record in the booking ledger: the guest’s name, postal address, telephone number, the dates of the stay, the room held, the deposit paid, and any access requirement the guest has asked the Trust to plan for. The ledger is held in a locked drawer at reception and copied to the Trust’s accountants once a year for the audit. Card details are not retained; payment is taken at the desk and the card is not held overnight.
How long a record is kept
Booking records are held for six years and three months from the date of departure, in line with HMRC retention rules. Correspondence with a guest is held for two years from the date of the last letter, except where the guest has asked for self-exclusion under the responsible-gaming standing instructions; that letter is held for the period the guest has asked for, and one further year, and is then destroyed.
How to ask for a record, or for it to be destroyed
Under the UK General Data Protection Regulation and the Data Protection Act 2018, a guest of the hotel has the right to ask for a copy of any record the Trust holds in respect of them, to ask for a record to be corrected, and (subject to the retention rules above) to ask for a record to be destroyed. Requests are made in writing to the editorial address; the Trust will reply within thirty calendar days. The Trust’s standing data controller is the Trust itself; the Information Commissioner’s Office (ico.org.uk) is the supervisor.