Welcome to Thornleigh Guest House (“we”, “us”, “our”). We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website:
www.thornleighguesthouse.co.uk

By using our website, you agree to the terms of this Privacy Policy.

Thornleigh Guest House is the data controller responsible for your personal data.

Contact details:
Address: Thornleigh Guest House, Thornbarrow Rd, Windermere - LA23 2EW
Email: [email protected]

We collect and process the following categories of personal data:

Information You Provide Directly

You may provide personal data when you:

• Make an enquiry or booking
• Contact us via email or contact forms
• Request information about our services

This may include:

• Full name
• Email address
• Telephone number
• Booking details (e.g., dates of stay, preferences, special requests)

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Device type and operating system
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses

Sensitive Data

We do not intentionally collect sensitive personal data (such as health, religion, or biometric data) unless it is necessary for your stay (e.g., accessibility needs), and only with your explicit consent.

We use your personal data for the following purposes:

To Provide Services

• Manage and confirm bookings
• Respond to enquiries
• Deliver customer support

To Improve Our Website and Services

• Analyse usage trends
• Enhance user experience
• Maintain website security

For Legal and Administrative Purposes

• Comply with legal obligations
• Maintain records for accounting and tax purposes

For Marketing (Where Applicable)

• Send updates, offers, or news (only if you have opted in)

You may unsubscribe from marketing communications at any time.

Under UK GDPR, we rely on the following lawful bases:

• Contractual Necessity – to fulfil bookings or respond to service requests
• Legitimate Interests – to operate and improve our business
• Consent – for marketing communications or optional data
• Legal Obligation – to comply with applicable laws

We do not sell your personal data.

We may share your data with trusted third parties, including:

• Booking and reservation platforms (e.g., if you book via third-party services)
• Payment processors
• Website hosting and IT service providers
• Professional advisors (e.g., accountants, legal advisors)
• Regulatory authorities where required by law

All third parties are required to process your data securely and lawfully.

We primarily store and process your data within the UK.
If any data is transferred outside the UK, we ensure appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses).

We retain personal data only as long as necessary:

• Booking and financial records: up to 6 years (legal requirement)
• Enquiry data: up to 12 months
• Marketing data: until you withdraw consent

After this period, your data will be securely deleted or anonymised.

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at:
[email protected]

Our website uses cookies to:

• Ensure proper website functionality
• Analyse traffic and user behaviour
• Improve performance and user experience

You can control or disable cookies through your browser settings.

We recommend displaying a cookie consent banner to comply with UK law.

We take appropriate technical and organisational measures to protect your data, including:

• Secure hosting environments
• Encrypted communications (HTTPS)
• Access controls and authentication

However, no system is completely secure, and we cannot guarantee absolute security.

Our website may contain links to external websites.
We are not responsible for their privacy practices. We encourage you to review their privacy policies.

Our website is not intended for children under the age of 16.
We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated revision date.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk
Helpline: 0303 123 1113

If you have any questions about this Privacy Policy or your data, please contact:

Thornleigh Guest House
Address: Thornleigh Guest House, Thornbarrow Rd, Windermere - LA23 2EW
Email: [email protected]