Last updated: 13 May 2026
Cumbrian Coast Cottages is operated by the host based in Allonby, Maryport, Cumbria. For the purposes of UK GDPR, we are the data controller for the personal information you give us. You can contact us at hello@cumbriancoastcottages.co.uk.
We collect only the data needed to run a holiday let cleanly: your name, email address, phone number, postal address, the dates of your stay, the number of guests and any dogs, dietary or accessibility notes you choose to share, and the messages you exchange with us. When you pay, your card details are entered directly into Stripe and never reach our servers. Stripe shares a payment confirmation, the last four digits of the card and the cardholder name with us for reconciliation.
We use your data to confirm and manage your booking, to send pre-arrival information (key code, parking, wifi), to send a brief check-in and a post-stay review request, to keep accurate records for accounting and HMRC, and to comply with legal obligations. We do not use your data for advertising and we do not sell it.
Our lawful basis under UK GDPR is contract (to deliver your booking), legitimate interest (to run the business, prevent fraud and respond to enquiries) and legal obligation (tax, accounting). Marketing emails are sent only if you opt in, on the basis of consent which you may withdraw at any time.
We share data with a small number of trusted suppliers acting as data processors on our behalf: Stripe (payment processing), Resend (transactional email), Vercel (website hosting), and any housekeeping or maintenance contractor who needs limited information to service the cottage. We never share guest data with Airbnb, Booking.com or any other channel partner unless you originally booked through them.
Most of our processors host data inside the UK or the EEA. Where data is transferred outside the UK or EEA (for example to US-headquartered Stripe), it is protected by appropriate safeguards including UK International Data Transfer Agreements and EU Standard Contractual Clauses.
Booking records are kept for six years to comply with HMRC requirements, then deleted. Marketing consents are kept until withdrawn. Website analytics, where used, are kept for no longer than 26 months.
You have the right to access your data, to correct it, to ask us to erase it, to restrict how we process it, to data portability, and to object to processing. To exercise any of these, email hello@cumbriancoastcottages.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
See our separate cookies notice.
If we make material changes to this policy we will update the date at the top and, where appropriate, contact you by email.