GDPR

This page explains how Chapel Bricks complies with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

It should be read alongside our Privacy Policy, which provides full details of how we collect and use personal information.

1. Data controller

Ray & Tracey Archer are the data controllers for personal information processed in connection with Chapel Bricks holiday cottage and this website.

Contact: info@chapelbricks.com
Chapel Bricks, High Street, Withernwick, HU11 4TR

2. Personal data we process

We may process the following categories of personal data:

• Contact details (name, email, phone, address);
• Booking and stay information;
• Payment and invoicing records;
• Communications and correspondence;
• Marketing preferences;
• Technical and usage data from our website.

We do not routinely process special category data (such as health information). If you voluntarily share information relating to accessibility needs or allergies to help us prepare for your stay, we will only use it for that purpose.

3. Purposes and lawful bases

Purpose	Lawful basis
Managing bookings and your stay	Performance of a contract
Processing payments	Performance of a contract / legal obligation
Sending booking confirmations and stay information	Performance of a contract / legitimate interests
Marketing emails and newsletters	Consent
Website security and basic analytics	Legitimate interests / consent (where required)
Tax, accounting, and legal compliance	Legal obligation

4. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Typical retention periods are set out in our Privacy Policy.

5. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access - to obtain a copy of your personal data;
• Right to rectification - to correct inaccurate or incomplete data;
• Right to erasure - to request deletion in certain circumstances;
• Right to restrict processing - in limited circumstances;
• Right to object - to processing based on legitimate interests or for direct marketing;
• Right to data portability - to receive your data in a structured, machine-readable format where applicable;
• Right to withdraw consent - at any time where processing is based on consent.

We will respond to valid requests within one month. There is no fee unless a request is manifestly unfounded or excessive.

6. Data processors and third parties

We use trusted third-party providers for services such as website hosting, email, and payment processing. These providers act as data processors and may only use personal data in accordance with our instructions and applicable data protection law.

We require processors to implement appropriate security measures and confidentiality obligations.

7. Data security

We take appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and staff awareness. In the event of a personal data breach that poses a risk to individuals, we will notify the ICO and affected individuals where required by law.

8. International data transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR requirements.

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

10. How to contact us or complain

To exercise your rights or raise a data protection concern, email info@chapelbricks.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113