Privacy Policy
# Privacy Policy
**The Woodleigh Hotel**
**Effective Date:** [30 July 2026]
## 1. Introduction
The Woodleigh Hotel ("we", "our", or "us") is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.
This Privacy Policy explains how we collect, use, store and protect your personal data when you:
* Make a booking with us.
* Stay at our hotel.
* Contact us by telephone, email or through our website.
* Book through third-party booking platforms such as Airbnb, Booking.com, Expedia or similar.
* Visit our website.
* Use our Wi-Fi service.
* Subscribe to marketing communications (where applicable).
We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy legislation.
---
# 2. Who We Are
**Data Controller**
The Woodleigh Hotel
32 King Edward Avenue
Blackpool
Lancashire
FY2 9TA
Email: [Insert Email Address]
Telephone: [Insert Telephone Number]
If you have any questions regarding this Privacy Policy or how your data is used, please contact us using the details above.
---
# 3. Information We Collect
Depending on how you interact with us, we may collect:
## Identity Information
* Full name
* Date of birth (where required)
* Nationality (where legally required)
## Contact Information
* Email address
* Telephone number
* Postal address
## Booking Information
* Arrival and departure dates
* Number of guests
* Room booked
* Booking reference
* Special requests
* Accessibility requirements
* Vehicle registration (where parking is provided)
## Payment Information
Payments are normally processed securely through third-party providers.
We do **not** store full debit or credit card details.
## Communication Records
* Emails
* Telephone enquiries
* Messages sent through booking platforms
* Website contact forms
## Technical Information
When visiting our website we may collect:
* IP address
* Browser type
* Device information
* Cookies
* Website usage information
## CCTV
Where CCTV is installed for security purposes, images may be recorded in public areas.
CCTV is used solely for:
* Crime prevention
* Guest safety
* Staff safety
* Property protection
---
# 4. How We Collect Your Data
Your information may be collected when you:
* Book directly with us.
* Book via Airbnb, Booking.com, Expedia, Agoda, Trip.com or similar platforms.
* Contact us by email or telephone.
* Complete forms on our website.
* Stay at our hotel.
* Use guest Wi-Fi.
* Leave a review.
* Sign up for newsletters.
---
# 5. Lawful Basis for Processing
Under UK GDPR we process personal data using one or more of the following lawful bases:
### Contract
To fulfil your booking and provide accommodation.
### Legal Obligation
To comply with taxation, accounting and legal requirements.
### Legitimate Interests
To:
* Operate our business
* Improve our services
* Prevent fraud
* Ensure guest safety
* Respond to enquiries
### Consent
Where required for:
* Marketing emails
* Optional cookies
Consent can be withdrawn at any time.
---
# 6. How We Use Your Information
We use personal data to:
* Process bookings
* Confirm reservations
* Manage check-in and check-out
* Communicate before, during and after your stay
* Respond to enquiries
* Process payments
* Issue invoices
* Meet legal obligations
* Improve customer service
* Handle complaints
* Prevent fraud
* Protect our property
* Send marketing communications where you have consented
---
# 7. Sharing Your Information
We only share information where necessary.
Recipients may include:
* Payment processors
* Booking platforms
* IT providers
* Website hosting providers
* Accountants
* Legal advisers
* HM Revenue & Customs
* Police or other authorities where legally required
We never sell your personal information.
---
# 8. International Transfers
Where booking platforms or technology providers process data outside the UK, appropriate safeguards will be in place in accordance with UK GDPR.
---
# 9. Data Security
We take appropriate technical and organisational measures to protect your information, including:
* Secure passwords
* Restricted staff access
* Encrypted systems where appropriate
* Secure payment providers
* Anti-virus protection
* Firewalls
* Regular software updates
Although we take reasonable precautions, no online system can be guaranteed to be completely secure.
---
# 10. Data Retention
We retain information only for as long as necessary.
Typical retention periods include:
Booking records – up to 7 years
Invoices and financial records – 7 years
Marketing consent records – until withdrawn
CCTV recordings – normally up to 30 days unless required for investigation
Website analytics – in accordance with our cookie settings
---
# 11. Your Rights
Under UK GDPR you have the right to:
* Access your personal data.
* Request correction of inaccurate information.
* Request deletion of your data where applicable.
* Restrict processing.
* Object to processing.
* Request data portability.
* Withdraw consent at any time.
* Lodge a complaint with the Information Commissioner's Office (ICO).
To exercise your rights, please contact us using the details above.
---
# 12. Cookies
Our website may use cookies to:
* Improve functionality
* Remember preferences
* Analyse website performance
* Enhance the user experience
Where legally required, we will request your consent before placing non-essential cookies.
You can control cookies through your browser settings.
---
# 13. Marketing
We will only send promotional emails where:
* You have consented; or
* We are legally permitted to do so.
You may unsubscribe at any time by following the unsubscribe link or contacting us.
---
# 14. Children's Privacy
Our services may be used by families; however, bookings are made by adults.
We do not knowingly collect personal data directly from children without appropriate legal basis.
---
# 15. Third-Party Websites
Our website may contain links to third-party websites such as:
* Airbnb
* Booking.com
* Expedia
* Trip.com
* Agoda
* Local attractions
We are not responsible for the privacy practices of those websites.
---
# 16. CCTV
Where CCTV operates:
* Appropriate signage is displayed.
* Recordings are used only for security purposes.
* Access is restricted.
* Images are retained only as long as necessary.
---
# 17. Changes to this Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
---
# 18. Contact Us
If you have any questions regarding this Privacy Policy or your personal data, please contact:
**The Woodleigh Hotel**
32 King Edward Avenue
Blackpool
Lancashire
FY2 9TA
Email: [Insert Email Address]
Telephone: [Insert Telephone Number]
---
# 19. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk
Telephone: 0303 123 1113