Privacy Policy

Last updated: 23 August 2026. This notice replaces our privacy policy of 27 May 2019.

Taswell Retreats Limited runs the website www.taswellretreats.uk and two self-catering cottages, Camside and Grooms Lodge, in Chipping Campden in the Cotswolds. This notice explains what personal data we collect when you use the website, make an enquiry or stay with us, why we collect it, who we share it with and the rights you have over it. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who we are

The data controller is Taswell Retreats Limited, company number 11789945, whose registered office is at Sunnyside, Back Lane, Pebworth, Stratford-upon-Avon, Warwickshire, CV37 8XA.

For anything to do with your personal data, use the contact form at taswellretreats.uk/contact.

What we collect and why

We collect only what we need to answer your enquiries, take and manage bookings, look after you during your stay and keep our accounts. The situations in which we collect personal data are set out below.

Enquiries and the contact form

When you use the contact form on this website, we receive your name, your email address and whatever you write in your message. Messages sent through the form are delivered to us by email using Resend (resend.com), our email delivery provider.

Lawful basis: our legitimate interest in responding to you, and taking steps at your request before entering into a contract.

Mailing list

If you sign up to our mailing list, we keep your email address (and your name, if you give it) so that we can send you occasional news and offers about the cottages. Sign-ups are sent to us by email through Resend, and your address may also be stored in a Resend audience list used to send the emails.

Lawful basis: your consent. You can withdraw it at any time by using the unsubscribe link in any email we send, or through our contact form, and we will remove you from the list.

Bookings and payments

Bookings are taken through the AdvanceCM (formerly Tokeet) booking engine at taswellretreats.booksafely.com. When you book we collect your name, contact details, the size of your party, your dates and any special requirements you tell us about. This booking data is stored in AdvanceCM.

Card payments are processed by Stripe. Your card details go directly to Stripe, and Taswell Retreats never sees or stores your full card number.

Bookings may also reach us through third-party booking platforms. Those platforms collect your details under their own privacy policies and pass us what we need to host you.

Lawful basis: performance of our contract with you. We also have a legal obligation to keep financial records, which we retain for six years.

Website analytics

We use Google Analytics 4, configured in cookieless 'consent denied' mode. In this mode it sets no cookies and stores no identifiers on your device. It receives only aggregated, pseudonymous usage signals, such as page views, approximate region and device type, so that we can see which pages are being used. We cannot identify you from this data, which is why the site has no cookie banner: no non-essential cookies are set.

Hosting and server logs

The website is hosted by Vercel, on servers in the EU and the US under standard contractual clauses. As with most hosting, Vercel's servers may record your IP address and request data in logs for security and troubleshooting. These logs are kept for a short period only.

Embedded content from other providers

The cottage tour videos are hosted on our own site and play in your browser — no third-party video service is involved. The contact page embeds a Google Map; when you use it, content loads from Google and Google's privacy policy applies to whatever it collects.

Identity documents

We do not ask guests for passports, driving licences or any other identity documents.

Who we share your data with

We do not sell or rent your personal data. We share it only with the providers that help us run the business, each of which handles it on our instructions or under its own privacy policy for the service it provides:

Resend: delivery of contact-form, mailing-list and other emails
AdvanceCM (formerly Tokeet): the booking engine and storage of booking records
Stripe: card payment processing
Third-party booking platforms: where you booked through one of them
Vercel: website hosting
Google: website analytics and Google Maps

We may also disclose personal data where the law requires it, for example to HMRC or in response to a lawful request from a public authority.

International transfers

Some of these providers (Vercel, Google, Stripe and Resend) may process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations, the International Data Transfer Agreement, or standard contractual clauses, so that your data receives equivalent protection.

How long we keep your data

Enquiries: two years
Booking and payment records: six years, as required by HMRC
Mailing list: until you unsubscribe
Website analytics: aggregated only, and contain no personal data
Hosting server logs: a short period, for security

Cookies

This website sets no advertising or analytics cookies. Our analytics runs without cookies or device identifiers, so there is no cookie banner because there is nothing to consent to.

When you go on to book, the booking engine at booksafely.com may set strictly necessary cookies to run your checkout session, along with its own analytics. Those cookies are governed by AdvanceCM's own privacy and cookie policy.

Your rights

Under UK GDPR you have the right to:

ask for a copy of the personal data we hold about you
have inaccurate data corrected
have your data erased where we no longer need it
restrict how we use it
receive the data you gave us in a portable format
object to processing based on our legitimate interests
withdraw consent at any time, without affecting what was done before you withdrew it

To exercise any of these rights, contact us through the contact form at taswellretreats.uk/contact. We will respond within one month, and there is no charge unless a request is clearly unfounded or excessive.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first.

Information Commissioner's Office

Children

Our website and services are intended for adults. You must be 18 or over to make a booking, and we do not knowingly collect personal data from children.

Changes to this notice

If anything changes, we will update this page and change the date at the top. Please check back from time to time.

Contact

Taswell Retreats Limited, company number 11789945. Registered office: Sunnyside, Back Lane, Pebworth, Stratford-upon-Avon, Warwickshire, CV37 8XA.