Legal notice

Name of company
Old Forge Cottage

Registered office
Lyston Smithy
Hereford HR2 8EL

Contact details
Tel: 1981540685 1981540685
Please use the contact us form if you wish to email us.

GDPR Compliance information

• Nature of work - Holiday cottage 

   

  Description of processing

   The following is a broad description of the way this organisation/data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances.

  We use email addresses to contact bookings that come directly to us for our holiday cottage. We also use booking sites such as Airbnb, Home&Away/ Owners Direct and Tripadvisor who will hold your details, we do not use or processes emails from them. We use email adresses to contact our customers to issue receipts for payments, and information about their stay with us. We do not pass the information on to third parties or store the information.

   

  Reasons/purposes for processing information

  We process personal information to enable us to promote our goods and services, to maintain our accounts and records and to support and manage our staff.We do not pass it on to third parties.

   

  Type/classes of information processed

  We process information relevant to the above reasons/purposes. This may include:

  • personal details such as name, email and contact phone number

   

  We also process sensitive classes of information that may include:

  • physical or mental health details ~ should disability access be needed for the cottage.

   

  Who the information is processed about

  We process personal information about our:

  • customers and clients
  • suppliers and services providers
  • advisers, consultants and other professional experts
  • complainants and enquirers

   

  Who the information may be shared with

  We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). We only share personal information to comply with the law and only with professional organisations. What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons (but this is highly unlikely).

   

  Where necessary or required we share information with:

  • family, associates and representatives of the person whose personal data we are processing
  • educators and examining bodies
  • central government
  • credit reference agencies
  • suppliers and service providers
  • debt collection and tracing agencies
  • financial organisations

   

  CCTV for crime prevention

  CCTV is used for maintaining the security of property and premises and for preventing and investigating crime, it may also be used to monitor staff when carrying out work duties. For these reasons the information processed may include visual images, personal appearance and behaviours. This information may be about staff, customers and clients, offenders and suspected offenders, members of the public and those inside, entering or in the immediate vicinity of the area under surveillance. Where necessary or required this information is shared with the data subjects themselves, employees and agents, services providers, police forces, security organisations and persons making an enquiry.

   

  Transfers

  It may sometimes be necessary to transfer personal information overseas. (As we use Airbnb, HomeandAway/Owners Direct and Trip advisor) When this is needed information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the data protection act. 

   

  GDPR registration number: ZA356657