Privacy Policy

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:   SR Nurse t/a Poolside Lodges South Lodges, Salhouse Road, Rackheath, Norwich NR13 6LD

​​​

1. Who we are

Poolside Lodges provides self‑catering holiday accommodation in Norfolk. We collect and process personal data to manage bookings, communicate with guests, and operate our business.

 

2. The personal data we collect

We may collect and process the following types of personal data:

​

Information you provide directly

• Name

• Address

• Email address

• Telephone number

• Booking details

• Payment‑related information (processed securely by third‑party providers)

• Any information you choose to send us via email, forms or enquiries

 

Information collected automatically

When you visit our website, we may collect:

• IP address

• Browser type

• Device information

• Pages viewed

• Cookie preferences

​

Information from third parties

Depending on your settings, we may receive information from:

• Booking platforms (e.g., BookingMood, Airbnb,)

• Email marketing providers (e.g., Mailchimp)

• Social media platforms (if you interact with us there)

​

3. Cookies and tracking technologies

Our website uses cookies to improve your experience and to understand how visitors use the site.

 

Essential cookies

These are required for the website to function and cannot be switched off.

 

Analytics cookies (non‑essential)

We use Google Analytics 4 to understand website usage. These cookies are only set with your consent, which you can give or withdraw at any time via our cookie banner.

 

Third‑party cookies

Some third‑party services (e.g., embedded maps, booking widgets) may set their own cookies.

You can manage your cookie preferences at any time through your browser or our cookie settings tool.

 

4. CCTV

Poolside Lodges has security cameras outside the property to keep customers, vehicles, and the business safe. Sometimes, the police or other official authorities ask to see footage. We only shares the footage if the request is proper and legal according to data protection laws.

​

5. How we use your personal data

We use your data for the following purposes:

• To manage and confirm bookings

• To communicate with you before, during and after your stay

• To respond to enquiries

• To send marketing communications (only with your consent)

• To improve our website and services

• To meet legal or regulatory obligations

We do not sell or rent your personal data to anyone.

 

6. Our lawful bases for processing

We process your personal data under the following lawful bases:

1. Contract – to manage your booking and provide accommodation services

2. Legitimate interests – to operate and improve our business, respond to enquiries, and maintain records

3. Consent – for marketing emails and non‑essential cookies

4. Legal obligation – where required by law (e.g., accounting records)

 

7. How long we keep your data

We keep your personal data only for as long as necessary:

• Booking records: up to 7 years (legal requirement for financial records)

• Marketing data: until you withdraw consent

• Cookie data: according to cookie expiry or until you withdraw consent

We securely delete or anonymise data when it is no longer needed.

 

8. Sharing your data

We may share your data with trusted third parties who help us operate our business, including:

• Booking platforms (BookingMood, Airbnb, etc.)

• Email marketing provider (Mailchimp)

• Website hosting and analytics providers (e.g., Google)

• Payment processors

• Financial records processors (e.g. accounting software & accountants)

• IT and administrative service providers

These organisations only process your data on our instructions and must keep it secure.

 

8.International transfers

Some of our providers (e.g., Mailchimp, Google) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK Addendum to EU Standard Contractual Clauses

• Adequacy decisions

• Additional security measures

 

9. Your rights under UK GDPR

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion of your data

• Restrict how your data is used

• Object to processing based on legitimate interests

• Withdraw consent at any time (e.g., marketing emails)

• Request a copy of your data in a portable format

To exercise any of these rights, contact: info@poolsidelodges.co.uk

 

10. Marketing communications

We only send marketing emails if you have given explicit consent. You can unsubscribe at any time using the link in any email or by contacting us directly.

 

11. Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access or disclosure.

 

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

 

13. Complaints

If you have concerns about how we handle your data, please contact us at:

info@poolsidelodges.co.uk

 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk