How we handle your data

Depending on how you use the site, we may collect:

• Guest sign-in: the email address you use to sign in to the Guests area, plus the date and time you signed in.
• Direct booking & enquiry details: if you book or enquire directly (rather than through Airbnb), your name, email address, phone number, postal address and any details about your stay that you give us.
• Payment information: if you pay a booking balance or the check-in damage deposit online, your card and payment details are entered directly into Stripe’s own secure payment page — we never see or store your full card number.
• Messages you send us: if you use one of the WhatsApp links on the site (for example to arrange a reflexology session or send us a message at checkout), we receive that message and your WhatsApp number in the same way as any WhatsApp conversation.
• Website analytics: Google Analytics collects standard technical data about your visit — pages viewed, approximate location, device and browser type — using cookies. This isn’t linked to your name or booking.

• Administering your stay and booking (name, contact details, payment) — necessary to perform our contract with you, or to take steps you ask for before entering into one.
• Guest sign-in — to confirm that whoever is viewing house rules, pool safety information and arrival details is an actual registered guest, and to keep that information secure. This is our legitimate interest in protecting guest safety information; we don’t use it for marketing.
• Replying to messages and enquiries — our legitimate interest in responding to you, or to perform our contract with you if you’ve already booked.
• Site analytics — our legitimate interest in understanding how the site is used so we can improve it. You can control analytics cookies through your browser settings at any time (see “Cookies” below).
• Accounting and tax records — a legal obligation, where a direct booking involves a payment.

We use Google Analytics to understand how the site is used, which sets cookies in your browser to recognise repeat visits and measure site traffic. It doesn’t identify you personally.

Your browser also saves your Guests-area sign-in email locally (in localStorage, not a cookie) so you’re not asked to sign in again on the same device. Clearing your browser’s site data for this website removes it.

You can block or delete cookies at any time through your browser settings, or install a Google Analytics opt-out add-on. Blocking cookies won’t stop you using the site, including the Guests area.

We don’t sell your data. We share it only where needed to run the site and your stay:

• Cloudflare — our website host, which stores guest sign-in records and serves the site.
• Stripe — processes online payments (see above).
• Google — Analytics (site traffic) and our Google Business Profile (if you leave us a review via the link we provide, that review is public on Google, not something we control).
• WhatsApp (Meta) — if you message us via a WhatsApp link.
• Airbnb — only if you book through Airbnb, in which case Airbnb is its own separate data controller under its own privacy policy.

Some of these providers may process data outside the UK/EEA. Where they do, they operate under their own adequacy arrangements or standard contractual clauses.

• Guest sign-in records: up to 12 months, then deleted.
• Direct booking and payment records: kept as long as required for accounting and tax purposes (normally up to 6 years, per HMRC record-keeping requirements).
• WhatsApp messages: until you or we delete the conversation.

You can ask us to delete data sooner where we’re not legally required to keep it.

Under UK GDPR, you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• ask us to correct inaccurate data;
• ask us to delete your data, where we don’t need to keep it for a legal reason;
• ask us to restrict or object to certain processing;
• ask for your data in a portable format, where relevant; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email Hello@Kingsland.co.uk. We’ll respond within one month.