Beach House Camber Privacy Policy

Last updated: 3rd November 2025

We are the controller of your personal data. For more information on controllers and their responsibilities please see our guidance on data protection principles, definitions, and key terms.

This privacy notice tells you what to expect us to do with your personal information.

Contact details
What information we collect, use, and why
Lawful bases and data protection rights
Where we get personal information from
How long we keep information
Who we share information with
Sharing information outside the UK
How to complain

Contact details

Email

bookings@beachhousecamber.com

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

Names and contact details
Addresses
Information relating to compliments or complaints
Website user information (including user journeys and cookie tracking)

We collect or use the following information for the operation of customer accounts and guarantees:

Names and contact details
Addresses
Purchase history

We collect or use the following information for to prevent, detect, investigate or prosecute crimes:

Financial transaction information
Information relating to health and safety, e.g., accident book records

We collect or use the following information for service updates or marketing purposes:

Names and contact details
Purchase or viewing history
your Internet Protocol (IP) address, and details of which version of web browser you used
Website and app user journey information
Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

Name
Contact information

We collect or use the following personal information for dealing with queries, complaints or claims:

Names and contact details
Purchase or service history
Customer or client accounts and records
Financial transaction information
Correspondence

Where you provide your consent, we use Google Analytics cookies to collect information about how you use the Stowaway Beach House website (‘the site’).

Google Analytics processes information about:

the pages you visit on the Stowaway Beach House website
how long you spend on the site
how you arrived at the site
What you click on while you are visiting the site

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.
Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.
Your right to erasure – You have the right to ask us to delete your personal information. Read more about the right to erasure.
Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.
Your right to object to processing – You have the right to object to the processing of your personal data. Read more about the right to object to processing.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

Collecting contact information via our two opt-in contact forms on the Stowaway website allows us to reply to questions and other enquiries.
The use of website analytics ensures that our website is functioning correctly and website visitors are able to find the information they need.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information to prevent, detect, investigate or prosecute crimes:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:

With consent we use cookies to collect information on inbound referrals, search terms, and location to understand the reach of our website and where improvements can be made. For more information, review our cookie policy.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for legal requirements are:

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability (as per The Immigration (Hotel Records) Order 1972).

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Where we get personal information from

Directly from you

How long we keep information

Your contact information is securely stored for contact purposes on our business email account which is operated by Google (Gmail).

If you do not proceed with a booking your details will only be retained for the purposes of addressing your enquiry and any follow-up correspondence required.

Data Type	Description	Retention period
Enquiry via form or direct email	Enquiry with no booking.	Up to 2 years
Financial records	Financial records held in our PayPal business account.	7 years
Active or past booking	Has completed a past booking with us or has a pending booking.	7 years

Data processors

beds24 | booking agent | Berlin, Germany

This data processor does the following activities for us: They process and manage booking requests and associated information on our behalf. They store information about past, present, and future bookings at our property. You can review the beds24 Privacy Policy at their main website.

Bluehost (newfold digital) | hosting and storage provider | Florida, United States

This data processor does the following activities for us: They process and manage contact form entries on the website on our behalf. They store information about past form entries. You can review the newfold digital Privacy Policy at their main website.

Facebook (Meta) | Social Media | California, United States

This data processor does the following activities for us: Monitors referrals and traffic between our business Facebook page (facebook.com/stowawaybeachhouse/) and our website. You can review the Meta Privacy Policy at their main website.

hCaptcha (Impressum) | security | Florida, United States

This data processor does the following activities for us: Monitors entries to our contact forms to help minimise security risks posed by bots and spam engines. It provides a simple test to make sure the site visitor is human and saves the results of that test. You can review the Impressum Privacy Policy at their main website.

Google analytics | analytics, website operation and measurement | Dublin, Ireland

This data processor does the following activities for us: Monitors the page visits on the Stowaway Beach House website, how visitors spent on the site, how visitors arrive at the site and what they click on while visiting the site. This helps us to understand and improve the functionality of our site. You can review the Google Privacy Policy at their main website.

Google maps | display of maps | Dublin, Ireland

This data processor does the following activities for us: Displays customised embedded Google maps in the site. The version of Google maps in use does not collect personal information or third-party cookies. However, this may change based on updates to Google’s technologies. You can review the Google Privacy Policy at their main website.

PayPal UK | payment processor | London, United Kingdom

This data processor does the following activities for us: When the PayPal option is selected for payment they process personal and financial data related to the selected payment method (e.g., credit/debit card or via PayPal account). You can review the PayPal Privacy Policy at their main website, see also non-account holders.

YouTube (Google) | video player | Dublin, Ireland

This data processor does the following activities for us: enables us to embed and play videos in the site. Monitors the number of views of videos embedded on the site. You can review the Google Privacy Policy at their main website.

Others we share personal information with

Suppliers and service providers (contracted website services and maintenance). UK-based.

Sharing information outside the UK

Where necessary, we will transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: beds24

Category of recipient: Data processor and storage provider

Country the personal information is sent to: Germany

How the transfer complies with UK data protection law: The country or sector has been assessed as providing adequate protection to data subjects (also known as Adequacy Regulations or UK data bridge).

Organisation name: Bluehost (newfold digital)

Category of recipient: Hosting and storage provider