Privacy Policy

We only collect information that we genuinely need to manage your booking and run our website. Specifically:

• Booking information — your name, email address, phone number, the dates of your stay, the number of guests, and any preferences or requests you share with us.
• Payment information — handled directly by our payment provider, Stripe. We do not see, store, or process your card details ourselves.
• Correspondence — any messages you send via our contact forms or by replying to our emails.
• Guestbook submissions — name, location, dates of stay, message and (optionally) photos. These are reviewed before being made public.
• Technical data — basic, anonymous information such as IP address, browser type, and pages viewed, used to keep the site running and detect abuse.

We use the information you provide for the following purposes:

• To process your booking, take payment, and send confirmation emails (including a calendar attachment).
• To communicate with you before, during, and after your stay.
• To inform Kentisbury Grange reception of your arrival, where applicable, so that your check-in is smooth.
• To respond to enquiries you send via our contact forms.
• To publish approved guestbook entries on our website.
• To detect and prevent fraudulent or abusive use of the site.

Under UK GDPR, we rely on the following lawful bases:

• Contract — to perform our agreement with you when you make a booking.
• Legitimate interests — to operate, secure, and improve the website, and to communicate with prospective and past guests.
• Consent — for guestbook entries, which you submit voluntarily for publication, and for any optional marketing communications.
• Legal obligation — for tax, accounting, and regulatory record-keeping.

We do not sell your information to anyone. We share it only with carefully chosen service providers who help us run the booking process:

• Stripe (payments) — see stripe.com/privacy.
• Resend (transactional email) — see resend.com/legal/privacy-policy.
• Vercel (website hosting) — see vercel.com/legal/privacy-policy.
• Neon (database hosting) — see neon.tech/privacy-policy.
• Kentisbury Grange — minimal booking information (name and dates) is shared with reception so they can welcome you on arrival.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of our guests or business.

Some of our service providers (e.g. Stripe, Vercel, Resend) may process your information outside the UK. Where this happens, we rely on the providers' own adequacy mechanisms, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, to ensure your information remains protected to UK GDPR standards.

We keep your booking information for as long as is necessary for the purposes set out above and to comply with our legal obligations:

• Booking records — kept for up to seven years to comply with HMRC tax requirements.
• Guestbook entries — kept indefinitely while published; removed promptly on request.
• Contact-form messages — typically deleted within 12 months unless they relate to an ongoing matter.

Under UK GDPR, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information erased where we no longer need it.
• Restrict or object to certain processing.
• Withdraw consent at any time, where consent is the basis for processing.
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, please email us at hello@parracombelodge.co.uk. We aim to respond within one month.

Our site uses only the cookies and local storage strictly necessary to make the website function — for example, to remember the welcome screen has been seen, to power the admin area, and to detect potential abuse. We do not use third-party analytics, advertising, or tracking cookies.

We take the protection of your information seriously. Payments are processed by Stripe over an encrypted connection; we never see or store card details. The website runs over HTTPS, our database is encrypted at rest, and access to the admin area is password-protected.

Our website and booking service are not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. Bookings should be made by an adult, who is responsible for any minors travelling with them.

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be communicated via the site or by email where appropriate.

For any questions, requests, or complaints relating to your personal information, please email hello@parracombelodge.co.uk or write to us at:

Parracombe Lodge
Kentisbury Grange
Kentisbury, Barnstaple
North Devon, EX31 4NL
United Kingdom