Privacy Policy

Last updated: 5 January 2026

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you make a booking or otherwise interact with us in relation to The Old Barn 1844, a private holiday rental property in Lapworth, Warwickshire.

1. Who We Are

Business Name: The Old Barn 1844
Address: The Old Barn, Lapworth, Warwickshire, B94 6AU
Email: ginnymm09@gmail.com

For the purposes of UK data protection laws, The Old Barn 1844 is the data controller of your personal data.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• Identity Data: Full name of the lead guest and any named guests. 
• Contact Data: Email address, telephone number, and postal address. 
• Booking Information: Dates of stay, number of guests, payment status. 
• Payment Data: We do not store full card details, but our payment processors may collect and process payment information securely. 
• Correspondence: Emails or messages regarding your booking or stay. 
• Website Data (if applicable): IP address, browser type, and site usage statistics via cookies or analytics tools.
   

3. How We Collect Your Data

We collect personal data:

• Directly from you when you make an enquiry, booking, or correspond with us. 
• Through booking platforms (e.g. Airbnb, Booking.com), if applicable. 
• From payment processors if you pay by card, bank transfer, or online method. 
• Via our website (if used), through cookies or contact forms.
   

4. Legal Basis for Processing

We rely on the following legal bases under the UK GDPR:

• Managing bookings, communications, check-in/out – Contract 
• Processing payments and deposits – Contract and Legitimate Interests 
• Meeting tax, legal, or regulatory obligations – Legal Obligation 
• Responding to queries or complaints – Legitimate Interests 
• Safety, access control, or emergencies – Legitimate Interests
   

5. Sharing Your Data

We do not sell or rent your data. We may share limited data with:

• Payment providers (e.g. Stripe, PayPal, banks). 
• Booking platforms (if you booked via third party). 
• Professional advisers (e.g. legal, accounting). 
• Authorities if legally required (e.g. HMRC, police, courts).
   

All such parties are under legal obligation to protect your data.

6. How Long We Keep Your Data

We retain your data only as long as necessary:

• Booking and financial records: 6 years (for legal and tax purposes). 
• Correspondence: Up to 2 years after your stay. 
• Security deposit data: Up to 14 days after check-out, unless a dispute arises. 
• Website analytics: As per provider settings.
   

We securely delete or anonymise your data once it is no longer required.

7. International Transfers

Your data is generally stored within the UK. If we use systems or third-party services that transfer data outside the UK (e.g. email providers or cloud platforms), we ensure that appropriate safeguards (such as standard contractual clauses) are in place.

8. Your Rights Under UK Data Protection Law

You have the right to:

• Access your personal data. 
• Request correction of inaccurate data. 
• Request deletion of your data (in certain circumstances). 
• Object to or restrict processing (in limited cases). 
• Request data portability (where applicable). 
• Lodge a complaint with the Information Commissioner’s Office (ICO).
   

To exercise your rights, email: ginnymm09@gmail.com

ICO Contact
Website: www.ico.org.uk
Phone: 0303 123 1113

9. Security Measures

We take appropriate steps to protect your data, including:

• Secure storage of electronic and paper records.
•  Limited access to personal data.
•  Password protection and encrypted systems.
   

10. Cookies and Website Use

If you use a website with cookies or analytics (e.g. Google Analytics), you are required to include a Cookie Policy and obtain consent where required.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website (if applicable) or provided to you by email.

Last updated: 5 January 2026