Privacy Policy
Privacy Policy — bedinbritain.co.uk
Last updated: 01 August 2026
This Privacy Policy explains how BED IN BRITAIN (“we”, “us”, “our”), operating bedinbritain.co.uk (the “Site”), collects, uses, stores and protects information about visitors and guests (“you”, “User”).
We are the data controller for the personal data described below. If you have any questions about this policy or how we handle your data, please write to us at:
5 Cranbury Road, Reading, RG30 2XE
1. What information we collect
We collect different information depending on whether you use the Site as a Guest (booking a stay direct with us) or a Host (listing a property).
1.1 Information from Guests
When you make a booking enquiry or complete a reservation direct with us, we collect:
- Full name, email address, phone number
- Billing address (where required for payment)
- Booking details: dates, property selected, number of guests, special requests
- Any messages you send to us through the Site
1.2 Information from Hosts
When you register as a Host to list a property, we collect:
- Full name, email address, phone number, and business/trading name (if applicable)
- Property details: address, description, photos, amenities, pricing/availability
- Correspondence with us through the Site
1.3 Payment information
Where Guests book and pay direct with us, payments are processed by Stripe, Inc. We do not store full card numbers, CVV, or other sensitive card data on our servers — this is collected and processed directly by Stripe. We retain:
- Transaction records (amount, date, booking reference, payment status)
- A Stripe reference ID linked to the booking
See Stripe’s own privacy policy for how they process this data: stripe.com/gb/privacy
1.4 Information collected automatically
When you browse the Site, we may automatically collect:
- IP address, browser type and version, device/operating system
- Pages visited, time spent, referring site
- Cookie data (see Section 5)
2. Why we collect it and our lawful basis
| Purpose | Data used | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Processing and managing your booking | Name, contact details, booking details, payment reference | Contract — necessary to perform the booking |
| Processing payments | Payment reference, transaction data | Contract |
| Responding to enquiries/support | Contact details, message content | Contract / Legitimate interest |
| Fraud prevention and security | IP address, transaction data | Legitimate interest |
| Sending booking confirmations, essential service updates | Email, booking details | Contract |
| Marketing emails (optional) | Email address | Consent (opt-in only, you can withdraw at any time) |
| Site analytics and improving the Site | Usage/cookie data | Consent (non-essential cookies) / Legitimate interest (essential cookies) |
| Complying with legal/tax obligations | Booking and transaction records | Legal obligation |
We do not use your data for any purpose incompatible with the above without asking for your consent first.
3. Who we share your data with
We do not sell, rent, or trade your personal data. We share it only where necessary:
- Stripe (payment processing) — see stripe.com/gb/privacy
- Property hosts/owners — booking-relevant details (name, dates, guest count, contact info) so they can prepare for and manage your stay
- IT/hosting providers — Yorkshire web Space, who host the Site and its database, under a data processing agreement
- Email/SMS service providers — for booking confirmations and communications, if applicable
- Law enforcement or regulators, where required by law
Any international transfer of your data (e.g. Stripe processing outside the UK) is carried out under an approved transfer mechanism (e.g. UK International Data Transfer Agreement / adequacy decision).
4. How long we keep your data
- Booking and transaction records: retained for [6 years] to meet HMRC/tax record-keeping obligations
- Guest profile data: retained while your account is active, deleted [X months] after account closure or last activity, whichever is requested
- Marketing consent records: retained until you withdraw consent
- Enquiry/message data: retained for [X months] unless it becomes part of a booking record
After these periods, data is securely deleted or anonymised.
5. Cookies
The Site uses cookies. On your first visit, you will be shown a cookie banner allowing you to accept or reject non-essential cookies before they are set, in line with the UK Privacy and Electronic Communications Regulations (PECR).
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Site functionality, booking session, security, login | No — always active |
| Analytics | Understanding Site usage (e.g. [Google Analytics/other]) | Yes |
| Payment | Set by Stripe during checkout | No — necessary for the transaction |
| Marketing | [If used — remarketing, ad targeting] | Yes |
You can change your cookie preferences at any time via [link to cookie settings], or by adjusting your browser settings. Blocking essential cookies may prevent the booking system from working correctly.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), subject to our legal retention obligations
- Restrict or object to certain processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time where processing is based on consent (e.g. marketing)
- Complain to the ICO (Information Commissioner’s Office) at ico.org.uk if you believe we have mishandled your data
To exercise any of these rights, please write to us at 5 Cranbury Road, Reading, RG30 2XE. We will respond within one month as required by law.
7. Security
We use appropriate technical and organisational measures to protect your data, including [SSL/TLS encryption, access controls, secure hosting, regular security updates]. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children
The Site is not directed at children, and we do not knowingly collect personal data from anyone under 18 without appropriate consent.
9. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy, but for material changes affecting how we use your data, we will provide clearer notice (e.g. a Site banner or email).
10. Contact us
Questions about this policy or your data please write to us at:
- 5 Cranbury Road, Reading, RG30 2XE
