1. Introduction This Privacy Policy explains how ‘The Lodge – Heaton Moor’ (“we”, “our”, “us”) collects, uses, shares and safeguards personal information when you visit our webpage on thelodgeheatonmoor.com or interact with embedded services provided by Airbnb and YouTube. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

• Data Controller: The Lodge – Heaton Moor
• Registered office: 3 Napier Rd, Stockport SK4 4HG
• Email: salgannon@icloud.com

3. Personal data we collect

Category	Examples	Source
Identification & contact	name, email address, phone number	Contact-form submissions; direct emails
Booking information	dates, guest numbers, special requests	When you click through to Airbnb; Airbnb is a separate controller once you proceed
Technical data	IP address, browser type, referring URL, pages viewed	Server logs; security software
Usage & analytics	page interactions, dwell time, errors	First-party cookies; optional analytics cookies (e.g. Google Analytics)
Multimedia	YouTube video views, playback events	YouTube embeds (see §7)

4. How we collect data

• Directly from you: when you fill in a form, email us, or call us.
• Automatically: via cookies, server logs and similar technologies.
• From third parties: Airbnb (when you complete a booking) and Google/YouTube (when you play an embedded video).

5. Purposes & legal basis

Purpose	Legal basis (UK GDPR Art. 6)
Responding to enquiries, providing customer support	Responding to enquiries, providing customer support
Managing reservations via Airbnb	Contract (Airbnb’s own privacy policy applies after redirection)
Ensuring Site security and troubleshooting	Legitimate interests
Measuring Site performance, improving content	Legitimate interests – analytics cookies only used with consent where required
Displaying embedded YouTube videos	Legitimate interests; consent for non-essential cookies

6. Sharing your data We only share personal data when necessary:

• Airbnb Ireland UC – To manage bookings you initiate.
• Google LLC (YouTube) – When you view embedded videos; YouTube may set cookies and collect usage data.
• Service providers – Hosting, IT support, and security vendors under strict confidentiality agreements. We never sell your data.

7. Cookies & similar technologies The Site uses:

1. Essential cookies – Enable core functionality; always active.
2. Functional/media cookies – Set by YouTube to remember player preferences.

8. International transfers Some providers (e.g. Google, Airbnb) operate outside the UK. Where data leaves the UK/EEA, we rely on:

• UK adequacy regulations, or
• Standard Contractual Clauses plus supplementary safeguards.

9. Data retention We keep:

• Enquiry emails: 12 months after last correspondence
• Booking records: 7 years (accounting and tax)
• Server logs: 30 days
• Data may be retained longer if required for legal claims or compliance.

10. Your rights Under the UK GDPR you can: access, rectify, erase, restrict, object to processing, and request data portability. You may also withdraw consent at any time (for cookies or marketing) without affecting prior lawful processing.

How to exercise your rights: Email salgannon@icloud.com with your request. We will respond within one month. You may also complain to the Information Commissioner’s Office (ICO) if you are not satisfied.

11. Security We use HTTPS encryption, server-side firewalls, regular patching, and least-privilege access controls to protect your data.

12. Changes to this policy We may update this Privacy Policy from time to time. Any material changes will be highlighted on this page and, where appropriate, notified to you by email. Please review this Policy periodically.