Privacy Policy
Introduction
This Privacy Policy applies to the processing of your personal data (“Personal Data”), as a hotel guest or visitor to our website (“Guest,” “Visitor,” or “you”), carried out by Shillingford Bridge Hotel (“Hotel,” “we,” “us”).
As a guest or visitor, you are entitled to the protection of your Personal Data. The Hotel respects your privacy and ensures that all Personal Data is processed in compliance with applicable laws and regulations, including the General Data Protection Regulation (GDPR). We are committed to transparency in the collection, use, and protection of your data.
It is important that you read this policy carefully to understand how and why we collect your Personal Data, what we do with it, how long we retain it, with whom we share it, how we protect it, and your rights regarding the data.
Data controller
In accordance with GDPR, the Hotel acts as the “Data Controller.” This means that we are responsible for deciding how and why we process your Personal Data.
Our contact details are:
Shillingford Bridge Hotel
Roshan Takhar
Shillingford Hill,
Wallingford,
Oxfordshire, OX10 8LZ,
United Kingdom.
Tel: +44 (0)1491 836 687
Email: [email protected]
Processing authorities
In compliance with data protection legislation, we strive to:
- Process your Personal Data fairly, lawfully, and transparently.
- Collect only the necessary data for legitimate, specified purposes.
- Ensure that data is accurate and kept up to date.
- Retain data only for as long as needed for processing purposes.
- Securely store your data and protect it from unauthorised access or misuse.
Legal basis for personal data processing
We process your Personal Data based on the following legal bases:
- Contractual necessity: Data processing is necessary to fulfill our contract with you.
- Consent: Processing occurs when you give consent for specific purposes.
- Legal obligations: Processing may be required to comply with legal or regulatory obligations.
- Vital interests: Processing is necessary to protect your vital interests or those of others.
- Legitimate interests: We may process data to pursue our legitimate interests or those of third parties, unless these are overridden by your rights and freedoms.
Personal data we collect and process
We collect various types of Personal Data, which may include:
- Identity information (name, gender, date of birth, nationality, etc.)
- Contact details (address, email, phone number)
- Information about your stay (arrival/departure dates, room preferences)
- Financial information (credit card details, transaction history)
- Health-related data (allergies, dietary preferences, etc.)
- Website usage data (IP address, device information, cookies)
For more details about cookies and the use of Google Analytics, please refer to our Cookies Policy.
Personal data sources
Your Personal Data may be collected from various sources, including:
- Information you provide directly to us during booking or your stay.
- Travel agents, online booking platforms, or third-party systems.
- Website interactions (including cookies and other tracking technologies).
Personal data processing and collecting purposes
Your data is processed for the following purposes:
- Fulfilling our contract with you (e.g., managing your booking, processing payments).
- Complying with legal obligations (e.g., providing information to tax authorities).
- Responding to your requests and preferences during your stay.
- Protecting your vital interests in the case of an emergency.
- Direct marketing (with your consent), such as sending you promotions and offers.
Shared personal data
We may share your Personal Data with third parties to fulfill legal, contractual, or operational obligations. These third parties include credit institutions, tax authorities, service providers (e.g., IT, accounting), law enforcement, and others when necessary.
We ensure that any third parties we engage protect your Personal Data and do not use it for purposes other than those specified in this Privacy Policy.
International data transfers
In some cases, we may transfer your Personal Data to third countries outside the UK or the EU. Such transfers will only take place if appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.
Data retention
We will retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Once this period has ended, your data will be securely deleted.
Your rights
You have the following rights regarding your Personal Data:
- Right to access: You can request a copy of your Personal Data.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can request the deletion of your Personal Data under certain circumstances.
- Right to restrict processing: You can request that we limit the processing of your data.
- Right to data portability: You can request the transfer of your data to another controller.
- Right to object: You can object to the processing of your data in certain situations.
- Right to withdraw consent: If processing is based on your consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Data protection measures
We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, destruction, or damage. Only authorized personnel have access to your data, and they are bound by confidentiality obligations.
Changes to this policy
We reserve the right to amend this Privacy Policy from time to time. Updates will be posted on our website with the date of the most recent revision. We encourage you to review the policy regularly to stay informed.
Contact us
If you have any questions or concerns about this Privacy Policy, or if you would like to exercise your rights regarding your Personal Data, please contact:
Roshan Takhar
Shillingford Bridge Hotel
Shillingford Hill,
Wallingford,
Oxfordshire, OX10 8LZ
Email: [email protected]
Information We Collect
This refers to information such as your name, contact details, travel preferences, dietary requirements, and any information about other persons you represent (such as those included in your booking). We collect this information through:
- Direct interactions (e.g., booking a stay with us, filling out forms, etc.)
- Our website, mobile applications, and social media interactions
- Third-party booking platforms or travel agents
We strive to keep your data accurate and up-to-date. If any of your information changes, please notify us so we can update our records.
Our Use of Your Information
We process your data to:
- Fulfill your hotel bookings
- Improve customer experience and personalize your stay
- Conduct internal reviews and improve our services
- Comply with legal and regulatory obligations, including crime prevention
- Conduct direct marketing (with your consent)
We may share your Personal Data with service providers, such as credit card processors or IT providers, who help us deliver services. These third parties are contractually obligated to protect your data and process it only according to our instructions.
If you do not agree to this use of your information, we will not be able to provide services, including hotel bookings, to you.
Sharing with Third Parties
We may share your Personal Data with trusted third-party providers in the following ways:
- For services such as processing payments, conducting surveys, and analyzing customer demographics.
- To communicate with you via email or SMS.
- With affiliate companies under our corporate structure.
These partners are prohibited from using your data for purposes other than those defined in this policy.
How We Protect Your Data
We implement strict security measures, including encryption and anonymization, to protect your information. We also ensure our systems and physical storage are secure. When you contact us about your data, we may request that you confirm your identity to prevent unauthorized access.
Data Retention
We retain your Personal Data for as long as it is necessary to fulfill the purposes for which it was collected. This period may vary depending on legal requirements, such as tax or regulatory compliance. After this time, your data will be securely deleted.
