Your information
Privacy notice
This notice explains what personal information we collect when you visit this website, get in touch or stay with us, why we need it, who we share it with, how long we keep it and your rights. We keep it as short and plain as we can.
1. Who we are
The data controller is Chris Hogg, trading as The Hogg’s Northumberland Wellness Retreat. If you have any questions about your information, or want to use your rights, email stay@thehoggswellnessretreat.co.uk. Our postal address is on our contact page.
2. What we collect
- When you get in touch: your name, email address, any phone number you give us, and what you tell us in your message.
- When you book directly (once direct booking opens): the lead guest’s name, email, phone number and billing address; your dates; the number of adults and children; any requests you make; and a record of your payments. Your card will be processed by Stripe. We won’t see or store your full card number.
- For the guest register: the details the law requires (see section 4).
- If you book through Airbnb or Booking.com: the platform shares the details we need to host you, such as your name, dates, number of guests and a way to contact you. The platform’s own privacy notice covers what it does with your information.
- When you stay: anything you tell us about your stay, and details of any damage or complaint.
- When you visit this website: basic technical information, such as your IP address and browser type, which our hosting provider records to keep the site running and secure (see section 6).
Please only give us information about the other people in your group that they’re happy for you to share.
3. Why we use it, and our legal basis
| What we use it for | Legal basis |
|---|---|
| Answering your questions and taking your booking | Taking steps at your request before a contract, and performing our contract with you |
| Taking payment and giving refunds | Performing our contract with you |
| Sending your arrival details, door code and stay information | Performing our contract with you |
| Keeping the guest register | Legal obligation |
| Keeping business and tax records | Legal obligation |
| Dealing with damage, complaints and legal claims | Our legitimate interests in running and protecting our business |
| Keeping the website and our systems secure, and preventing fraud | Our legitimate interests |
| Occasional news and offers to guests who booked directly with us | Our legitimate interests (you can opt out at any time, and every email has an unsubscribe link) |
| News you’ve asked us to send you, for example a Christmas availability alert | Your consent, which you can withdraw at any time |
We never sell your information, and we don’t use it for automated decision-making or profiling. We don’t send marketing to guests who booked through Airbnb or Booking.com.
4. The guest register
The Immigration (Hotel Records) Order 1972 applies to holiday lets. It requires us to keep a record of every guest aged 16 or over: their full name and nationality. For some overseas guests (broadly, those who aren’t British, Irish or Commonwealth citizens), the record must also include their passport number and place of issue, and their next destination if known. We ask the lead guest for these details before arrival. We keep the register for 12 months, and the police can ask to see it. We don’t ask for copies of passports or ID.
5. Who we share it with
We share only what each of these needs:
- Smoobu, the booking system and channel manager we’ll use once direct booking opens. It will hold those bookings and the related guest messages for us.
- Stripe, which will process card payments and refunds for direct bookings once they open. Stripe will also use some payment information for its own fraud-prevention and legal purposes, as explained in Stripe’s privacy policy.
- Google (Google Workspace), which provides our email.
- Cloudflare, which hosts and protects this website.
- The person who looks after the house and changeovers for us, who needs your name, dates and number of guests.
- Airbnb or Booking.com, if you booked through them, to manage your booking.
- Our accountant, insurer and legal advisers, when they need it.
- The police or other authorities, when the law requires it, for example to inspect the guest register.
Google and Cloudflare act as our processors, and Smoobu and Stripe will too once direct booking opens (except where stated above): they may only use your information on our instructions and must keep it secure.
6. This website
- We don’t use advertising or social-media tracking on this website, and we don’t currently use statistics (analytics) cookies. Our cookie notice has the details, and will be updated before that ever changes.
- The website’s fonts load from Google Fonts, so your browser shares your IP address with Google when the page loads.
- Links to Instagram, Facebook, Airbnb and Booking.com take you to their sites, which have their own privacy notices.
7. Where your information is stored
Our providers store information in the UK, the European Economic Area or, for some services, the United States. Where information goes outside the UK, it is protected by UK adequacy regulations or by the standard data-transfer contracts approved under UK law. We may look at booking details while we’re away from the UK, but only through the secure services listed above.
8. How long we keep it
| Information | How long |
|---|---|
| Enquiries that don’t lead to a booking | Up to 24 months after our last contact |
| Booking, payment and invoice records | 6 years after the end of the tax year of your stay, as tax rules require |
| Guest register | 12 months from your stay |
| Damage or complaint records | Until the matter is closed, then up to 6 years in case of a legal claim |
| Marketing list (direct guests and sign-ups) | Until you unsubscribe, or 3 years after your last stay or sign-up |
9. Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct anything that’s wrong or incomplete;
- ask us to delete your information, unless we have to keep it, for example for the guest register or tax records;
- ask us to restrict how we use it, or object to how we use it, including at any time to direct marketing;
- ask for a copy of information you gave us in a portable format;
- withdraw your consent at any time, where we rely on it.
Email stay@thehoggswellnessretreat.co.uk. It’s free, and we’ll reply within one month.
10. How to complain
If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Last updated: October 2026. If we change this notice, we’ll post the new version here.