Privacy Policy

Tullochwood Lodges respects your privacy. This policy explains what personal information we collect when you enquire, book, stay with us or use our website, why we use it, who may receive it, how long we keep it and the choices you have.

Data controller: Tullochwood Lodges Last updated: 20 August 2026

Who we are

Tullochwood Lodges is the data controller for personal information we collect directly from you. This means we decide why and how that information is used.

Contact: Tullochwood Lodges, Tullochwood, Rafford, Forres, Moray IV36 2RU
Email: enquiries@tullochwoodlodges.com
Telephone: 01309 673311

Where you book through another company, such as Airbnb, Booking.com or Cottages.com, that company will also have its own responsibilities for the information it collects. Please read its privacy notice as well.

Information we collect

We collect only the information reasonably needed to answer enquiries, arrange and manage stays, take payment, meet our legal duties and operate the website.

  • Identity and contact details, including your title, name, postal address, email address and telephone number.
  • Enquiry and booking details, including arrival and departure dates, lodge preference, party size, children and infants, correspondence and any notes or special requests you choose to provide.
  • Payment and transaction details, such as amounts paid, payment status and booking references. Card details are handled by the payment provider and are not stored by Tullochwood Lodges.
  • Stay information needed to provide the accommodation, deal with requests, resolve problems or protect guests, our property and our legal position.
  • Marketing preferences, including the opt-in or opt-out choice recorded in SuperControl and any later change to that choice.
  • Website and device information, such as IP address, browser, device, pages visited and cookie choices. Non-essential analytics are used only where the required consent has been given.
  • Reviews or feedback you choose to provide or publish.
Special requests: please do not send health or other sensitive information unless it is genuinely needed for your stay. If you choose to tell us about an accessibility, health or safety requirement, we use it only to understand and respond to that request, and we restrict access to it.

How we collect information

We may receive information directly from you by telephone, email, our enquiry form, WhatsApp, correspondence or in person. We also receive booking information through our booking system and, where relevant, from the travel company or agent through which you booked.

Technical information may be collected automatically when you use the website. Please see our Cookie Policy and use the website’s Consent Preferences control to review or change your non-essential cookie choices.

How and why we use your information

UK data protection law requires us to have a lawful basis for each use of personal information. The bases most relevant to Tullochwood Lodges are set out below.

Enquiries and bookings

To answer questions, check availability, prepare a booking and provide your stay. Lawful basis: steps requested before a contract and performance of our contract with you.

Payments and records

To take and reconcile payment, issue booking records, keep accounts and meet tax or licensing requirements. Lawful basis: contract and legal obligation.

Guest service and safety

To manage requests, maintain the lodges, deal with incidents and protect guests and property. Lawful basis: contract, legal obligation, vital interests where an emergency requires it, and our legitimate interests in operating safely.

Website operation and security

To deliver the website, prevent misuse, diagnose faults and keep systems secure. Lawful basis: our legitimate interests in running a secure and reliable service and, where required, legal obligation.

Analytics and improvement

To understand how the website is used and improve it. Lawful basis: consent for non-essential analytics cookies.

Optional marketing

To send news or offers only where you have opted in through SuperControl. Lawful basis: consent. You can opt out through SuperControl or by contacting us at any time.

Claims and business protection

To handle complaints, disputes, insurance matters or legal claims. Lawful basis: legal obligation and our legitimate interests in protecting the business and establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider the effect on your rights and use only information that is necessary and proportionate for the stated purpose.

Who we share information with

We do not sell personal information. We share only what is necessary with organisations that help us provide and protect the service, including:

  • SuperControl, for availability, booking, property-management services and the recording of guest marketing preferences.
  • HolidayRentPayment and Airwallex, where used to process and administer payments.
  • SiteGround, which hosts and protects the website and its data.
  • Google Analytics, where you consent to analytics cookies, to help us understand website use.
  • Travel companies and booking agents, such as Airbnb, Booking.com and Cottages.com/Awaze, where your booking or enquiry involves them.
  • WhatsApp/Meta, only when you choose to contact us through WhatsApp or use a related social-media service.
  • Professional advisers and service providers, such as accountants, insurers, IT support and legal advisers, where they need the information for their work.
  • Public authorities, regulators or emergency services where disclosure is required by law or necessary to protect someone.

Some providers act as our processors and may use information only on our instructions. Others, particularly payment providers, travel agents and social-media services, may also act as independent data controllers under their own privacy notices.

Information processed outside the UK

Some service providers may process information outside the UK. Where this happens, we use providers that apply an approved UK transfer mechanism, an adequacy arrangement or other safeguards required by UK data protection law. You may contact us for more information about the safeguards relevant to your information.

How long we keep information

We retain different categories of information according to the purposes and criteria below. Access is restricted to people who need the information for their work.

  • Enquiries that do not become bookings: normally up to 24 months after our last meaningful contact.
  • Booking records held in SuperControl: retained securely to maintain Tullochwood Lodges’ booking and transaction history, administer repeat bookings, meet accounting and legal requirements, and handle subsequent questions, complaints or claims.
  • Accounting and tax records: retained for the period required by the applicable accounting and tax rules, normally at least six years.
  • Website enquiry-form records: normally up to 24 months, unless the enquiry becomes part of a booking record or needs to be kept for a dispute.
  • Marketing preferences: recorded in SuperControl while relevant. Guests can opt in or opt out through their booking record, and marketing is sent only while the guest remains opted in. We may retain a minimal suppression record so that we continue to respect an opt-out.
  • Security and technical records: for the period reasonably needed to investigate faults, prevent misuse and protect the website.

The exact period may vary where we must preserve information for a complaint, insurance matter, legal claim, safeguarding issue or legal obligation.

How we protect information

We use proportionate technical and organisational measures to protect personal information. These include access controls, secure hosting, software and security maintenance, backups and limiting access to people who need the information for their work.

No internet service can promise absolute security. If we become aware of a personal-data breach, we will assess it promptly and notify affected people and the Information Commissioner’s Office where the law requires us to do so.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests or to direct marketing;
  • receive information you provided in a portable format where the right applies; and
  • withdraw consent at any time, without affecting earlier lawful use.

We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.

To exercise a right, email enquiries@tullochwoodlodges.com. We may need enough information to confirm your identity. We normally respond within one month, although the law allows more time for a complex request.

Children’s information

Bookings must be made by an adult. We may receive the number or ages of children in a party where needed for occupancy, pricing, equipment or safety, but we do not knowingly invite children to submit personal information directly through the website.

Questions and privacy complaints

If you have a question, want to exercise a right or believe we have handled your information incorrectly, please contact us first so that we can investigate.

Email enquiries@tullochwoodlodges.com with the subject Privacy enquiry or complaint, or write to us at the address above. We will acknowledge a privacy complaint within 30 days, investigate it appropriately and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. You do not have to contact us before approaching the ICO.

Changes to this policy

We may update this policy when our services, providers or legal duties change. The current version will always be published on this page and will show its latest review date. A material change will not retrospectively alter the lawful basis on which we already used your information.

Contact Tullochwood Lodges

Email: enquiries@tullochwoodlodges.com
Telephone: 01309 673311
Address: Tullochwood Lodges, Tullochwood, Rafford, Forres, Moray IV36 2RU

© 2026 • Powered by Nightingweb