Privacy Policy

Last updated: 12 September 2026

Who we are

The Lodge Burniston is operated by Laura McVeigh, trading as The Lodge Burniston. Laura McVeigh is the data controller responsible for the personal information described in this Privacy Policy.

The Lodge Burniston provides short-term, self-catering accommodation in Burniston, North Yorkshire.

If you have any questions about this Privacy Policy or how we use your personal information, please contact us:

Email: stay@thelodgeburniston.co.uk
Telephone: 07934 157936
Postal address: [Insert business correspondence address, if required]

About this Privacy Policy

This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we retain it and the rights available to you.

We may update this Policy occasionally. Any changes will be published on this page and the “Last updated” date will be amended.

Information we collect

Depending on how you interact with us, we may collect:

  • Your name, address, email address and telephone number

  • Booking details, including arrival and departure dates and the number of guests

  • Information about special requests, optional extras and stay preferences

  • Correspondence sent by email, contact form, telephone, text message, social media or through a booking platform

  • Payment and transaction information, although we do not normally receive or store your complete payment-card details

  • Marketing preferences

  • Information provided when you connect to or use guest Wi-Fi

  • Technical information, including your IP address, browser, device, operating system and approximate location

  • Information about how you use our website, including pages visited, referral sources and interactions with the site

  • Cookie identifiers and similar online identifiers

Please avoid providing sensitive personal information unless it is necessary for us to accommodate a specific request. If you provide information concerning accessibility, allergies or health requirements, we will use it only to respond to your request and provide your stay safely.

Bookings must be made by an adult. We do not knowingly collect personal information directly from children for marketing purposes.

How we collect your information

We may collect information:

  • When you make or enquire about a booking

  • When you book directly through our website or through Lodgify

  • When you book through Airbnb, Booking.com or another booking platform

  • When you complete a contact, registration or marketing form

  • When you purchase an optional extra or gift card

  • When you contact us by email, telephone, text message or social media

  • When you subscribe to marketing communications

  • When you use the website or connect to guest Wi-Fi

  • Through cookies, analytics tools and similar technologies

  • From payment providers and other companies involved in administering your booking

If someone makes a booking on your behalf, we may receive information about you from that person.

How and why we use your information

We use personal information only where we have a lawful basis for doing so.

To manage enquiries and bookings

We use your information to:

  • Respond to enquiries

  • Process and administer bookings

  • Take and confirm payments

  • Provide arrival, access and departure information

  • Supply optional extras

  • Communicate important information about your stay

  • Handle changes, cancellations, complaints and requests

  • Provide customer support

We generally process this information because it is necessary to enter into or perform our contract with you.

To operate and improve our business

We may use information to:

  • Maintain our website and booking systems

  • Understand how guests use our website and services

  • Improve our accommodation, website and guest experience

  • Prevent fraud, misuse and security incidents

  • Establish, exercise or defend legal claims

  • Maintain appropriate business records

We process this information where it is necessary for our legitimate interests in operating, protecting and improving The Lodge Burniston, provided those interests are not overridden by your rights.

To meet legal obligations

We may process and retain information where required for tax, accounting, insurance, public-health, regulatory or other legal purposes.

Marketing communications

We may send news, availability, offers or other marketing communications where you have consented to receive them or where we are otherwise permitted to do so by law, such as the limited “soft opt-in” available for existing customers.

You can unsubscribe at any time by selecting the unsubscribe link in an email or contacting stay@thelodgeburniston.co.uk.

Withdrawing consent will not affect the lawfulness of processing that occurred before consent was withdrawn. Essential communications directly connected with an enquiry or booking are not marketing communications.

Payments

Payments are processed by third-party payment providers such as Stripe or by the relevant booking platform.

Payment providers process card information securely under their own privacy policies. We generally receive confirmation of the transaction and limited payment information, rather than your complete card details.

Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files stored on your device when you visit a website.

Some cookies are strictly necessary for the website, booking system, security and shopping functionality to work. Other cookies may be used for analytics, embedded maps, marketing and personalisation.

Depending on your choices, cookies and similar technologies may be provided by:

  • Squarespace

  • Lodgify

  • Google Analytics

  • Google Maps

  • Meta

  • StayFi

  • Our payment and booking providers

We use Google Analytics to understand matters such as the number of website visitors, how visitors reached the site and which pages they viewed. Google Analytics may process online identifiers, device information, usage information and IP-related data.

Google Maps may set cookies or collect technical information when a map is displayed or used.

Meta Pixel may collect information about visits and interactions to help us measure advertising performance, but it should operate only where the appropriate cookie consent has been provided.

Non-essential cookies will not be placed unless you provide consent through our cookie controls. You can accept, reject or manage non-essential cookies through the cookie banner and can change your browser settings to block or delete cookies. Blocking some cookies may affect website functionality.

Guest Wi-Fi

If you use guest Wi-Fi provided through StayFi or another Wi-Fi provider, the service may collect contact details, device information, connection records, IP addresses and technical usage information.

Where marketing permission is requested through the Wi-Fi service, marketing communications will be sent only where we have an appropriate lawful basis. You can withdraw your permission at any time.

Who we share information with

We do not sell or rent your personal information.

Where necessary, we may share relevant information with trusted service providers that help us operate the accommodation and administer your stay, including:

  • Squarespace, which hosts and supports our website

  • Lodgify, which provides our direct-booking and property-management system

  • Stripe and other payment processors

  • Google, including Google Analytics and Google Maps

  • Meta, where Meta services or advertising tools are enabled

  • StayFi, which provides guest Wi-Fi and related services

  • Email and marketing-platform providers

  • IT, website, accounting, professional and administrative service providers

  • Contractors or suppliers where necessary to fulfil a request or resolve an issue

  • Insurers, professional advisers, regulators, law-enforcement bodies or courts where required

We disclose only the information reasonably necessary for the relevant purpose.

If you book through Airbnb or Booking.com, those companies will also process your information as separate data controllers under their own privacy policies. Your booking through those platforms is also subject to their applicable terms and privacy practices.

We may disclose information if required by law, to prevent fraud or crime, to protect the rights and safety of guests or others, or in connection with the sale or restructuring of the business.

International transfers

Some of our service providers may process or store personal information outside the United Kingdom, including in the United States or European Economic Area.

Where personal information is transferred outside the UK, we rely on an appropriate legal safeguard where required. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism.

Further information about the safeguards used by a particular provider is normally available in that provider’s privacy policy.

How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, insurance and reporting requirements.

Generally:

  • Booking, transaction and accounting records may be retained for up to six years after the end of the relevant financial year

  • Enquiries that do not result in a booking will normally be retained for no longer than 12 months

  • Booking correspondence may be retained alongside the relevant booking record where necessary

  • Marketing information will be retained until you unsubscribe, withdraw consent or the information is no longer required

  • Cookie and analytics information is retained according to the lifespan of the relevant cookie and the settings of the service concerned

We may retain information for longer where necessary to resolve a complaint, establish or defend a legal claim, prevent fraud or comply with a legal requirement.

How we protect your information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

These measures include using reputable service providers, password-protected systems, secure payment processors, access controls and appropriate website security.

Although we take reasonable precautions, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for access to the personal information we hold about you

  • Ask us to correct inaccurate or incomplete information

  • Ask us to delete your information

  • Ask us to restrict how we use your information

  • Object to processing based on legitimate interests

  • Object to direct marketing at any time

  • Ask us to transfer certain information to you or another organisation

  • Withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exemptions.

To exercise any of these rights, email stay@thelodgeburniston.co.uk. We may need to request information to confirm your identity before responding. You will not normally be charged for exercising your rights.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

Complaints

If you are concerned about how we have used your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection:

Information Commissioner’s Office
www.ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

Contact us

For questions, requests or concerns relating to this Privacy Policy or your personal information, please contact:

Laura McVeigh, trading as The Lodge Burniston
Email: stay@thelodgeburniston.co.uk
Telephone: 07934 157936