The Saddlery · North Thoresby
Privacy Policy
How we collect, use, store and protect your personal information when you visit our website or book a stay.
We respect your privacy and collect only the personal information reasonably required to answer enquiries, administer bookings and operate our website.
Last updated: 7 September 2026
1. Our commitment to your privacy
The Saddlery Holiday Cottage is committed to protecting your personal information and handling it fairly, transparently and securely.
Our approach is that:
- Personal information should only be collected when it is needed for a clear and legitimate purpose.
- We should only collect the amount of information reasonably necessary for that purpose.
- Personal information should not be retained for longer than necessary.
- Appropriate steps should be taken to keep personal information accurate and secure.
- We will not sell your personal information.
We will only disclose personal information where you have authorised us to do so, where it is necessary to provide our services, or where disclosure is required or permitted by law.
2. Data protection law
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
The UK’s independent data protection regulator is the Information Commissioner’s Office. Further information about your rights is available from the Information Commissioner’s Office .
Data controller:
The Saddlery Holiday Cottage
High Street, North Thoresby, Lincolnshire,
DN36 5PL
Email: holidays@saddlerycottage.com
Telephone: 07831 301229
3. Information we collect and retain
The information we collect depends on how you interact with us. We collect only the information required to respond to you, administer your booking, meet our legal obligations and maintain our website.
3.1 Booking and guest information
What we may collect: Your name, postal address, email address, telephone number, booking details, payment or invoice information, IP address and information you voluntarily provide in connection with your stay.
Why we collect it: To process and administer your booking, communicate with you about your stay, issue invoices, provide guest support and comply with accounting and legal obligations.
How long we keep it: Booking and transaction records may be retained for up to six years after the end of the relevant financial year, where necessary for tax, accounting or legal purposes.
Where it is stored: Information may be stored within our secure website administration system, booking system and business email account.
3.2 Mailing lists
We do not currently operate an email marketing or promotional mailing list through this website. We will not add you to a marketing list simply because you make an enquiry or booking.
3.3 Website and analytics information
What may be collected: The website you arrived from, pages viewed, links selected, browser type, device and operating system, approximate geographical area and IP address.
Why it may be collected: To understand how visitors use our website, measure website performance, maintain security and improve our content and services.
How long it is kept: Analytics information is retained only for as long as reasonably necessary for the purposes described above. Our current maximum analytics retention period is three years.
Analytics reports available to us are generally aggregated and are not used by us to identify you personally.
3.4 Contact forms and enquiries
What we may collect: Your name, email address, telephone number, IP address, the date and time of your enquiry and any information you include in your message.
Why we collect it: To respond to your enquiry, discuss a potential booking and provide the information or assistance you have requested.
How long we keep it: General enquiries are retained only for as long as reasonably necessary. Where an enquiry results in a booking or financial transaction, related records may be retained for up to six years for legal, accounting or tax purposes.
Where it is stored: Form submissions may be stored in the secure administration area of our website and in our business email account.
3.5 Business email contacts
We may retain your name and email address within our business email account so that we can communicate with you about an enquiry or booking. This information may be deleted when it is no longer required, or when you make a valid request for deletion.
A request for deletion may not apply to information we are legally required to retain.
4. Service providers and data processors
We use trusted third-party organisations to help us operate our website, email service and bookings. These providers may process personal information on our behalf only to the extent necessary to provide their services.
| Provider | Purpose | Privacy information |
|---|---|---|
| 3001 Web | Website hosting, storage, security and technical administration | View policy |
| Microsoft Outlook | Business email and communication | View policy |
| Website analytics and related website services, where enabled | View policy |
Some providers may process information outside the United Kingdom. Where this occurs, the provider is responsible for using an appropriate legal mechanism and safeguards for the transfer of personal information.
We may also disclose information where required by law, a court order or a lawful request from a public authority.
5. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
Measures used by us and our hosting provider include:
- SSL/TLS encryption when information is transmitted between your device and our website.
- Website, server and firewall security controls.
- Brute-force and malicious-request protection.
- Strong password requirements and restricted administrative access.
- Regular software, system and security updates.
- Monitoring for outdated or unsupported website components.
- Secure business email and website administration systems.
No method of transmitting or storing information can be guaranteed to be completely secure. We nevertheless take proportionate precautions appropriate to the nature of the information we process.
6. Personal data breaches
If a personal data breach occurs, we will assess the potential risk to the people affected and take appropriate action.
Where required by law, we will notify the Information Commissioner’s Office without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you when legally required to do so.
7. Cookies
Cookies are small text files placed on your device when you visit a website. They can help a website function, remember preferences, maintain security and provide information about how visitors use the site.
Our website may use:
- Essential cookies, which are required for core website functions and security.
- Preference cookies, which may remember choices you make.
- Analytics cookies, which help us understand how visitors use the website.
Non-essential cookies should only be placed after you have provided the relevant consent through our cookie notice. You may accept or decline non-essential cookies when the notice is displayed.
You can also restrict or delete cookies through your browser settings. Disabling essential cookies may prevent some parts of the website from functioning correctly.
You may change or withdraw your cookie choice using the cookie controls provided on the website, where available.
8. Our lawful bases for processing
UK data protection law requires us to have a lawful basis whenever we process personal information. The basis used depends on the reason for processing.
| Purpose | Lawful basis |
|---|---|
| Responding to an enquiry before a booking | Taking steps at your request before entering into a contract and our legitimate interests |
| Processing and administering a booking | Performance of a contract |
| Maintaining accounting and tax records | Compliance with a legal obligation |
| Maintaining website security and improving our services | Our legitimate interests |
| Using non-essential analytics or preference cookies | Consent |
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
9. Your data protection rights
Depending on the circumstances, UK data protection law may give you the right to:
- Be informed about how your personal information is collected and used.
- Request access to the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase your personal information in certain circumstances.
- Ask us to restrict the processing of your information in certain circumstances.
- Object to processing based on legitimate interests in certain circumstances.
- Request the transfer of eligible information to you or another organisation.
- Withdraw consent where consent is the lawful basis for processing.
- Object to certain solely automated decisions, including profiling.
These rights are not absolute and may be subject to legal exemptions. For example, we may need to retain booking and payment records to comply with tax or accounting requirements.
You will not normally be required to pay a fee to exercise your rights. We may ask for information necessary to confirm your identity before responding.
We aim to respond to valid requests within one month, although the law allows additional time for particularly complex requests.
10. Questions and complaints
If you have a question about this policy or believe your personal information has not been handled correctly, please contact us first so that we have an opportunity to investigate.
You also have the right to complain to the Information Commissioner’s Office. Details of how to make a complaint are available at ico.org.uk/make-a-complaint .
Information Commissioner’s Office telephone: 0303 123 1113.
11. Changes to this policy
We may update this Privacy Policy when our services, website technology, service providers or legal obligations change.
Any revised version will be published on this page and the “last updated” date will be amended. We recommend reviewing this page periodically.