Privacy Policy: Cairngorm Bothies

1. Introduction

Cairngorm Bothies (“we,” “us,” or “our”) is committed to protecting your privacy. This policy outlines how we collect, use, and store your personal data in accordance with the UK GDPR and the Data Protection Act 2018.

2. What Personal Data We Collect and Why

• Booking Information: When you book a stay, we collect your name, address, email, and phone number to fulfill our contract with you.

• Reviews: When visitors leave their reviews, we collect the data shown in the Freetobook review forms as part of the followup to a guests stay.

3. Legal Basis for Processing

Under UK law, we must have a “lawful basis” for processing your data. We primarily use:

• Contractual Necessity: To manage your bookings.

• Legal Obligation: To maintain records for tax (HMRC) purposes.

• Consent: Where you have signed up for our newsletter or replied to our request for a review, following your stay with us.

4. Who We Share Your Data With

We do not sell your data. We only share it with:

• Booking Partners: Services used to manage your reservation.

• Payment Processors: To securely handle transactions (we do not store full credit card details).

• Legal Authorities: Only if required by law (e.g., for tax or safety purposes).

5. Data Retention

• Booking Records: Under UK tax law, we generally retain financial and booking records for 6 years.

6. Your Rights Under UK Law

You have specific rights regarding your personal data:

• Access: You can request a copy of the data we hold about you.

• Rectification: You can ask us to correct inaccurate information.

• Erasure: You can ask us to delete your data (where we aren’t legally required to keep it).

• Data Portability: You can request your data in a machine-readable format.

• Withdraw Consent: If you’ve opted into marketing, you can opt out at any time.

8. Contact Information & Complaints

For any privacy concerns, please contact us at: [email protected]. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority.