Privacy Policy

Data Controller: Hole Mill, Branscombe, Devon, EX12 3BX

Last updated: April 2026

What Data We Collect

Name and email address (required for account creation and bookings)
Phone number (optional, for WhatsApp notifications)
Booking details (dates, guest count, payment confirmation)
Website usage data (analytics, with your consent)

How We Use Your Data

To process and manage your booking
To send booking confirmations and stay information
To send marketing messages (only with your explicit consent)
To operate the availability alert and referral systems

Your Rights

Right to access: Request a copy of your data via your profile page
Right to erasure: Delete your account from your profile page. Booking records are retained for 7 years for legal/financial compliance
Right to withdraw consent: Unsubscribe from marketing at any time from your profile
Right to portability: Download your data as JSON from your profile page

Cookies

We use essential cookies for authentication and optional analytics cookies (Google Analytics 4 and Vercel Analytics). You can control non-essential cookies via the cookie banner.

Third Parties

We use Stripe (payments), Resend (email), Twilio (WhatsApp), Guesty (booking management), and Cloudinary (media). Each is GDPR-compliant and processes data only as necessary.

Contact

For any privacy queries, email hello@holemill.co.uk