Tullochwood Lodges respects your privacy. This policy explains what personal information we collect when you enquire, book, stay with us or use our website, why we use it, who may receive it, how long we keep it and the choices you have.
Tullochwood Lodges is the data controller for personal information we collect directly from you. This means we decide why and how that information is used.
Contact: Tullochwood Lodges, Tullochwood, Rafford, Forres, Moray IV36 2RU
Email: enquiries@tullochwoodlodges.com
Telephone: 01309 673311
Where you book through another company, such as Airbnb, Booking.com or Cottages.com, that company will also have its own responsibilities for the information it collects. Please read its privacy notice as well.
We collect only the information reasonably needed to answer enquiries, arrange and manage stays, take payment, meet our legal duties and operate the website.
We may receive information directly from you by telephone, email, our enquiry form, WhatsApp, correspondence or in person. We also receive booking information through our booking system and, where relevant, from the travel company or agent through which you booked.
Technical information may be collected automatically when you use the website. Please see our Cookie Policy and use the website’s Consent Preferences control to review or change your non-essential cookie choices.
UK data protection law requires us to have a lawful basis for each use of personal information. The bases most relevant to Tullochwood Lodges are set out below.
To answer questions, check availability, prepare a booking and provide your stay. Lawful basis: steps requested before a contract and performance of our contract with you.
To take and reconcile payment, issue booking records, keep accounts and meet tax or licensing requirements. Lawful basis: contract and legal obligation.
To manage requests, maintain the lodges, deal with incidents and protect guests and property. Lawful basis: contract, legal obligation, vital interests where an emergency requires it, and our legitimate interests in operating safely.
To deliver the website, prevent misuse, diagnose faults and keep systems secure. Lawful basis: our legitimate interests in running a secure and reliable service and, where required, legal obligation.
To understand how the website is used and improve it. Lawful basis: consent for non-essential analytics cookies.
To send news or offers only where you have opted in through SuperControl. Lawful basis: consent. You can opt out through SuperControl or by contacting us at any time.
To handle complaints, disputes, insurance matters or legal claims. Lawful basis: legal obligation and our legitimate interests in protecting the business and establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we consider the effect on your rights and use only information that is necessary and proportionate for the stated purpose.
We do not sell personal information. We share only what is necessary with organisations that help us provide and protect the service, including:
Some providers act as our processors and may use information only on our instructions. Others, particularly payment providers, travel agents and social-media services, may also act as independent data controllers under their own privacy notices.
Some service providers may process information outside the UK. Where this happens, we use providers that apply an approved UK transfer mechanism, an adequacy arrangement or other safeguards required by UK data protection law. You may contact us for more information about the safeguards relevant to your information.
We retain different categories of information according to the purposes and criteria below. Access is restricted to people who need the information for their work.
The exact period may vary where we must preserve information for a complaint, insurance matter, legal claim, safeguarding issue or legal obligation.
We use proportionate technical and organisational measures to protect personal information. These include access controls, secure hosting, software and security maintenance, backups and limiting access to people who need the information for their work.
No internet service can promise absolute security. If we become aware of a personal-data breach, we will assess it promptly and notify affected people and the Information Commissioner’s Office where the law requires us to do so.
Depending on the circumstances, you may have the right to:
We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.
To exercise a right, email enquiries@tullochwoodlodges.com. We may need enough information to confirm your identity. We normally respond within one month, although the law allows more time for a complex request.
Bookings must be made by an adult. We may receive the number or ages of children in a party where needed for occupancy, pricing, equipment or safety, but we do not knowingly invite children to submit personal information directly through the website.
If you have a question, want to exercise a right or believe we have handled your information incorrectly, please contact us first so that we can investigate.
Email enquiries@tullochwoodlodges.com with the subject Privacy enquiry or complaint, or write to us at the address above. We will acknowledge a privacy complaint within 30 days, investigate it appropriately and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. You do not have to contact us before approaching the ICO.
We may update this policy when our services, providers or legal duties change. The current version will always be published on this page and will show its latest review date. A material change will not retrospectively alter the lawful basis on which we already used your information.
Email: enquiries@tullochwoodlodges.com
Telephone: 01309 673311
Address: Tullochwood Lodges, Tullochwood, Rafford, Forres, Moray IV36 2RU