Privacy & Cookie Policy

Hidden Valley Hideaway is operated by Stacy & Bob Baker, trading from:

For any questions about this policy or to exercise your data rights, contact us at contact@hiddenvalleyhideaway.co.uk or via our contact page. We are the data controller for the personal data described in this policy.

We only collect information you actively choose to share with us. This is limited to:

• Enquiry details: when you complete our contact form, email us or call us, we receive your name, email address, phone number (if you provide it), preferred dates, the subject of your enquiry and any message content you choose to include.
• Booking details: bookings are handled by our third-party booking platform — we do not collect or store payment card details on this website.

With your consent, we also use Google Analytics to collect anonymised information about how visitors use the site (see the Cookies section below). We do not use advertising or marketing cookies, and we do not buy or receive personal data from third parties.

We process your personal data only for the following purposes:

• To respond to your enquiry and arrange or manage a stay with us. Lawful basis: steps taken at your request prior to entering into a contract, or our legitimate interest in replying to people who get in touch.
• To meet our legal and accounting obligations (for example, retaining booking records). Lawful basis: legal obligation.

We do not use your data for marketing and we will not send you promotional emails or add you to any mailing list.

We do not sell your personal data. We share it only where strictly necessary, with:

• Our email and website hosting providers, who process data on our behalf to deliver this site and our enquiry inbox.
• Our booking platform, where you choose to make or manage a booking.
• Authorities or professional advisers where we are legally required to do so.

Enquiry emails are kept for up to 24 months after our last contact, then deleted. Booking records are kept for 6 years to meet UK accounting and tax requirements, after which they are securely deleted.

Your information is stored on secure servers within the UK or the European Economic Area (EEA). If any of our service providers process data outside the UK/EEA, we rely on safeguards approved under UK GDPR (such as the UK International Data Transfer Agreement or adequacy regulations).

Under UK GDPR, you have the right to:

• access a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your data, where we no longer have a lawful reason to hold it;
• restrict or object to our processing of your data;
• request a copy of your data in a portable format.

To exercise any of these rights, email us at contact@hiddenvalleyhideaway.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

A cookie is a small text file that a website may store on your device to make it work or to collect information about how you use it. When you first visit our site, a banner asks whether you're happy for us to use non-essential cookies. Nothing non-essential is loaded until you click Accept. You can change your choice at any time using the Cookie preferences link in the footer.

Essential: we use a single small entry in your browser's local storage to remember your cookie choice so we don't ask again on every page. This is required for the banner to work and cannot be switched off.

Analytics (only with your consent): if you accept, we load Google Analytics 4 (measurement ID G-VELRGS2JT7), which sets cookies (typically _ga and _ga_*) to measure things like page views, device type and approximate location. IP addresses are anonymised. We use this only to understand how the site is used and to improve it — not for advertising. If you reject, Google Analytics is not loaded and no analytics cookies are set.

The embedded Google Map on our contact page is loaded from Google and may set its own cookies for security and to remember your map preferences. If you prefer not to receive these, use the address details on our contact page instead of interacting with the embedded map, or block third-party cookies in your browser. For details, see Google's Privacy Policy.

Following links from our site to external services (for example our booking provider, Instagram, Facebook or TikTok) takes you to websites operated by those third parties, which have their own privacy and cookie policies.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. However, no transmission of information over the internet can be guaranteed to be completely secure.

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date. Please check back occasionally to stay informed.