Thimbleby Cottages (“we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal data is handled responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR).

This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to that data.

1. Who we are

Thimbleby Cottages is a self-catering holiday accommodation provider in North Yorkshire. We are the data controller for the personal information we collect via this website.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: [Insert email address]
• Telephone: 01609 883205
• Address: Thimbleby Hall, Northallerton, United Kingdom, DL6 3PY

2. What data we collect

When you use our website, we may collect the following information:

• Contact form enquiries – name, email address, phone number, and any other details you provide.
• Bookings – if you click through to our booking system (operated by Lodgify), you will be asked for personal and payment details directly on their secure platform. We do not process or store your payment information on our website.
• Website usage data – anonymous analytics information about how visitors use our website (e.g. pages visited, time on site), collected using Independent Analytics.
• Email communications – if you email us or subscribe to updates, your details may be processed through MailPoet for secure message delivery.

We use your information only for legitimate business purposes, including:

• Responding to enquiries sent via our contact form.
• Processing and managing holiday bookings (via Lodgify).
• Improving our website and services through anonymised analytics.
• Complying with our legal obligations (e.g. accounting or regulatory requirements).

We do not sell, rent, or trade your personal information with third parties.

Under the UK GDPR, we rely on the following lawful bases:

• Contract – to provide the services you have requested (e.g. processing a booking).
• Legitimate interests – to respond to enquiries and improve our website.
• Legal obligation – to comply with applicable laws and regulations.
• Consent – where you have opted in to receive marketing or updates from us.

We only share your personal data with trusted third parties where necessary:

• MailPoet – to securely transmit messages from our contact form.
• Independent Analytics – to collect anonymised visitor statistics (no personal data is stored).
• Lodgify – to process bookings and payments on their secure platform.
• Service providers and regulators – where required by law or to protect our rights.

We take appropriate technical and organisational measures to protect your personal data. Your data is stored securely and only for as long as necessary to fulfil the purposes described in this policy or as required by law.

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (“the right to be forgotten”).
• Restrict or object to processing of your data.
• Request transfer of your data to another service provider.
• Withdraw consent at any time (where applicable).
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

For more information on your rights, please visit: https://ico.org.uk/your-data-matters

Our website may use cookies to improve your browsing experience. Independent Analytics may set cookies to measure website performance. You can control cookies through your browser settings.

Our website may contain links to third-party websites (including Lodgify). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. The latest version will always be available on our website.