Privacy Policy

Riding House Farm Cottages ("we" or "our" or "us") are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you will be processed by us.

For the purpose of the Data Protection Act 1998 (the Act), and the General Data Protection Regulations (GDPR), from 25 May 2018, the data controller is Riding House Farm Cottages.

The information we collect from you

The information covered by this Privacy Policy includes the personal data you provide by filling in forms, to book or place an order with us and any other correspondence with us.

The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through this website; any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access.

How your information will be used

The information that we collect from you is obtained, processed, stored and transmitted in the United Kingdom in compliance with data protection legislation. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

We will not share your information with other organisations, except in the case of any legal obligation, or if our assets are acquired by a third party, in which case personal data held by us about our customers may be one of the transferred assets.

We would like to contact you with marketing information about our products and services. The legal basis by which we do this is your consent, if you choose to give it.

We will not store your information any longer than is necessary for the function of our business requirements. If you have consented to marketing from us, we will only continue to store your information if we are using it for this purpose.

Your rights

You have the right to ask us not to process your personal data for marketing purposes. You can exercise your right to prevent such processing, at any time, by using the unsubscribe function on a received marketing email or by contacting us.

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. From 25 May 2018, when GDPR becomes law, a reasonable Subject Access Request (SAR) can be made without a fee being charged. It will be carried out within one month. As part of a SAR, you may request that your personal data is corrected or deleted. The result of a deletion request may be affected by any outstanding bookings or orders in progress, or our obligation to keep tax records.

If you are not satisfied with our response you may contact the UK supervisory authority, the Information Commissioner's Office, https://ico.org.uk to report your concern.

Changes to our Privacy Policy

We reserve the right to update our Privacy Policy. We may inform you of any changes if this is necessary.