Privacy Policy

Last updated: 16 July 2026

At Luxe Haven Stay ("we", "us", "our"), your privacy is our priority. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, make a booking, or otherwise interact with us. By using our website or services, you agree to the practices described below.

1. Who We Are

Luxe Haven Stay is a boutique hotel located at 78 Ashbourne Lane, Cambridge CB2 8PB, United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, we act as the data controller for personal information collected through this website.

2. Information We Collect

We collect the following categories of information:

• Identity & contact data: name, email address, phone number, postal address.
• Booking data: reservation dates, room preferences, number of guests, special requests.
• Payment data: billing address and card details, processed securely via our third-party payment provider. We do not store full card numbers on our own servers.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools.
• Communications: records of correspondence when you contact us by email, phone, or contact form.

3. How We Use Your Information

We use your personal data to:

• Process and manage bookings and payments;
• Provide customer support and respond to enquiries;
• Send booking confirmations, reception updates, and service-related notices;
• Send promotional offers and newsletters, where you have opted in (you may unsubscribe at any time);
• Improve our website, services, and guest experience;
• Comply with legal, tax, and regulatory obligations;
• Detect and prevent fraud or misuse of our services.

4. Legal Basis for Processing

We process your data under one or more of the following legal bases: performance of a contract (e.g. your booking), your consent (e.g. marketing emails), our legitimate business interests (e.g. improving our services), and compliance with legal obligations (e.g. financial record-keeping).

5. Sharing Your Information

We do not sell your personal data. We may share information with trusted third parties who support our operations, including payment processors, booking platforms, IT and hosting providers, and email/marketing service providers. These parties are contractually required to protect your data and use it only for the purposes we specify. We may also disclose information where required by law, court order, or to protect our rights and safety.

6. International Transfers

Some of our service providers may process data outside the United Kingdom or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

7. Cookies

We use cookies and similar technologies to operate our website, remember your preferences, and analyze traffic. For full details on the types of cookies we use and how to manage them, please see our Cookie Policy.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, or reporting requirements. Booking and financial records are typically retained for up to 7 years in line with UK tax law; marketing data is retained until you withdraw consent.

9. Data Security

We implement appropriate technical and organizational measures — including encryption in transit, access controls, and regular security reviews — to protect your data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten"), subject to legal exceptions;
• Restrict or object to certain processing;
• Request data portability;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:

• Email: privacy@luxehavenstay.com
• Phone: +44 1223 456 789
• Post: 78 Ashbourne Lane, Cambridge CB2 8PB, United Kingdom