This Privacy Policy explains how Notehouse Farms Limited collects, uses and protects your personal information when you use our website, contact us, or make an enquiry about staying at our holiday cottage.

1. Who we are

This website is operated by Notehouse Farms Limited , a company registered in England and Wales.

Company number: 11863116
Registered office: Mills & Reeve LLP, 1 St James Court, Norwich, Norfolk, United Kingdom, NR3 1RU
Contact email: [Insert client email address]

For the purposes of data protection law, Notehouse Farms Limited is the “data controller” of the personal information we collect about you.

2. What personal information we collect

We may collect the following information when you use our website or contact us:

• your name

• your email address

• your telephone number

• any information you include in your enquiry or message

• booking-related information, where relevant

• technical information about how you use our website, such as cookie data, IP address, browser type and device information

We only collect the information we need to respond to enquiries, manage bookings, improve our website and operate our business.

3. How we collect your information

We collect personal information when you:

• complete a contact or enquiry form on our website

• contact us by email, phone or another method

• make or discuss a booking

• browse our website and accept or interact with cookies

4. How we use your personal information

We use your personal information to:

• respond to your enquiry

• communicate with you about availability, bookings or your stay

• provide customer service

• manage our records and administration

• improve and maintain our website

• comply with legal, tax, accounting or regulatory obligations

• protect our business, website and users from fraud, misuse or security issues

5. Our lawful basis for using your information

Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the circumstances, we may rely on:

• Legitimate interests — for example, responding to enquiries, running our website and managing our business.

• Contract or pre-contract steps — for example, where you enquire about or make a booking.

• Legal obligation — where we need to keep certain records for tax, accounting or legal reasons.

• Consent — where required, for example for certain non-essential cookies or marketing communications.

6. Cookies and website analytics

Our website may use cookies and similar technologies to help it function, improve performance and understand how visitors use the site.

For more information, please see our Cookie Policy .

You can usually manage or disable cookies through your browser settings. Where required by law, we will ask for your consent before placing non-essential cookies on your device.

7. Who we share your information with

We may share your personal information with trusted third parties who help us operate our website and business, such as:

• website hosting and maintenance providers

• email and communication providers

• booking or payment providers, where applicable

• professional advisers, such as accountants or legal advisers

• regulators or authorities, where required by law

We only share personal information where necessary and expect third parties to protect it appropriately.

We do not sell your personal information.

8. How long we keep your information

We will only keep your personal information for as long as necessary for the purpose it was collected.

As a general guide:

• enquiry information may be kept for up to [insert period, e.g. 12 months]

• booking and transaction records may be kept for up to [insert period, e.g. 6 years] where required for tax, accounting or legal reasons

• cookie and analytics information will be kept in line with our Cookie Policy and the settings of the relevant tools

We may keep information for longer if required to resolve disputes, comply with legal obligations or protect our legal rights.

9. How we protect your information

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.

However, no website or internet transmission is completely secure, so we cannot guarantee absolute security.

10. International transfers

Some of the service providers we use may process personal information outside the UK. Where this happens, we will take steps to ensure your information is protected in accordance with applicable data protection laws.

11. Your rights

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

• access the personal information we hold about you

• ask us to correct inaccurate or incomplete information

• ask us to delete your personal information

• object to or restrict certain processing

• withdraw consent, where we rely on consent

• request a copy of your information in a portable format, where applicable

• complain to the Information Commissioner’s Office

To exercise your rights, please contact us using the details above.

12. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (ICO) .

ICO website: ico.org.uk

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.