Privacy Policy

We only collect information that we genuinely need to manage your booking and run our website. Specifically:

• Booking information — your name, email address, phone number, the dates of your stay, the number of guests, and any preferences or requests you share with us.
• Payment information — handled directly by our payment provider, Stripe. We do not see, store, or process your card details ourselves.
• Correspondence — any messages you send via our contact forms or by replying to our emails.
• Guestbook submissions — name, location, dates of stay, message and (optionally) photos. These are reviewed before being made public.
• Technical data — basic, anonymous information such as IP address, browser type, and pages viewed, used to keep the site running and detect abuse.

We use the information you provide for the following purposes:

• To process your booking, take payment, and send confirmation emails (including a calendar attachment).
• To communicate with you before, during, and after your stay.
• To inform Kentisbury Grange reception of your arrival, where applicable, so that your check-in is smooth.
• To respond to enquiries you send via our contact forms.
• To publish approved guestbook entries on our website.
• To detect and prevent fraudulent or abusive use of the site.

Under UK GDPR, we rely on the following lawful bases:

• Contract — to perform our agreement with you when you make a booking.
• Legitimate interests — to operate, secure, and improve the website, and to communicate with prospective and past guests.
• Consent — for guestbook entries, which you submit voluntarily for publication, and for any optional marketing communications.
• Legal obligation — for tax, accounting, and regulatory record-keeping.

We do not sell your information to anyone. We share it only with carefully chosen service providers who help us run the booking process:

• Stripe (payments) — see stripe.com/privacy.
• Resend (transactional email) — see resend.com/legal/privacy-policy.
• Vercel (website hosting) — see vercel.com/legal/privacy-policy.
• Neon (database hosting) — see neon.tech/privacy-policy.
• Vercel Analytics (visitor statistics) — aggregated page-view counts only. It does not use cookies and does not identify individual visitors. See vercel.com/legal/privacy-policy.
• Microsoft Clarity (website usage analytics) — records how pages are used, including clicks, scrolling and mouse movement, to help us improve the site. It sets cookies and may capture a playback of your visit. Form fields and text you type are masked by default. See privacy.microsoft.com.
• Meta Platforms (Meta Pixel, for Facebook and Instagram advertising) — records the pages you view on our site so we can measure the performance of our advertising and show our ads to previous visitors. It does not receive card or payment details. See facebook.com/privacy/policy.
• Kentisbury Grange — minimal booking information (name and dates) is shared with reception so they can welcome you on arrival.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of our guests or business.

Some of our service providers (e.g. Stripe, Vercel, Resend, Microsoft, Meta) may process your information outside the UK. Where this happens, we rely on the providers' own adequacy mechanisms, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, to ensure your information remains protected to UK GDPR standards.

We keep your booking information for as long as is necessary for the purposes set out above and to comply with our legal obligations:

• Booking records — kept for up to seven years to comply with HMRC tax requirements.
• Guestbook entries — kept indefinitely while published; removed promptly on request.
• Contact-form messages — typically deleted within 12 months unless they relate to an ongoing matter.

Under UK GDPR, you have the right to:

• Access the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information erased where we no longer need it.
• Restrict or object to certain processing.
• Withdraw consent at any time, where consent is the basis for processing.
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, please email us at hello@parracombelodge.co.uk. We aim to respond within one month.

Most of what we use is strictly necessary to make the website work — for example, remembering that the welcome screen has been seen, powering the admin area, and detecting potential abuse. These are essential and cannot be turned off.

We also use a small number of analytics and advertising tools to understand how the site is used and to run our own marketing. None of them run unless you agree. When you first arrive we ask, and until you accept, nothing below is loaded and no cookie from it is set — declining is a real choice and the site works exactly the same either way. You can change your mind at any time using the Cookies link at the foot of any page.

• Vercel Analytics — counts page views in aggregate. It sets no cookies, stores nothing on your device and does not identify you, so it runs whether or not you accept the rest.
• Microsoft Clarity — sets cookies (_clck and _clsk) and records how pages are used, including clicks, scrolling and mouse movement. This can include a playback of your visit. Text you type into forms is masked by default, and we do not use it for advertising.
• Meta Pixel — sets cookies (_fbp, and _fbc if you arrived via a Facebook or Instagram ad) and tells Meta which pages you've viewed on our site. We use this to measure how our Facebook and Instagram advertising performs and to show our ads to people who have previously visited the site. It does not receive card or payment details.
• Marketing attribution — we set one cookie of our own (pl_attr, kept for 90 days) recording which link or advert brought you to the site — for example that you arrived from an Instagram ad rather than a search. It holds no name, email or address, and is used only so we can tell which of our own adverts lead to bookings. If your browser sends a “Do Not Track” signal we do not set it at all, and it is not set unless you have accepted cookies.

Of these, Meta Pixel is an advertising cookie — we use it only for our own advertising and we do not sell or share your data with any other advertiser. The simplest way to refuse all of them is to decline when we ask, or to use the Cookies link at the foot of any page to change an earlier answer. You can also opt out of Meta specifically via their own Ad Preferences, block cookies in your browser settings, or email us at hello@parracombelodge.co.uk and we will exclude you.

A few small things are remembered in your browser to keep the site behaving sensibly: whether you prefer the light or dark appearance, that you have already seen our welcome screen this visit, and that you have closed a message so we do not show it again. These stay on your device, are never sent to us or to anyone else, identify nobody, and are there because you asked for them by making the choice in the first place — so we do not ask permission for those.

Separately, we use Google Search Console, which reports how our pages appear in Google's search results — how often they are shown and which searches they appear for. It is Google's own record of its search results rather than anything collected from your visit, it sets no cookies on this site, and it tells us nothing about you as an individual.

We take the protection of your information seriously. Payments are processed by Stripe over an encrypted connection; we never see or store card details. The website runs over HTTPS, our database is encrypted at rest, and access to the admin area is password-protected.

Our website and booking service are not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. Bookings should be made by an adult, who is responsible for any minors travelling with them.

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be communicated via the site or by email where appropriate.

For any questions, requests, or complaints relating to your personal information, please email hello@parracombelodge.co.uk or write to us at:

Parracombe Lodge
Kentisbury Grange
Kentisbury, Barnstaple
North Devon, EX31 4NL
United Kingdom