Privacy Policy

Privacy Policy

Last updated: 1 August 2026

At The Paddocks Heacham, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

The Paddocks Heacham is the data controller responsible for the personal information collected through this website.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Email: holidayhouseheacham@yahoo.com

You may also contact us using the details provided on our Contact Us page.

What Information We Collect

We only collect personal information that is necessary to respond to your enquiries, manage your booking and provide our services.

This may include:

  • Your name.
  • Postal address.
  • Email address.
  • Telephone number.
  • Details you provide when making an enquiry.
  • Booking information, including the names of guests staying at the property and, where appropriate, the ages of children included in the booking.
  • Information about how you use our website through cookies, where you have given your consent.

How We Use Your Information

We use your personal information to:

  • Respond to your enquiries.
  • Process and manage your booking.
  • Communicate with you before, during and after your stay.
  • Process payments made through our website.
  • Meet our legal, tax and accounting obligations.
  • Improve our website and the services we provide.
  • Send occasional updates or special offers if you have chosen to receive marketing communications. You can opt out at any time.

Our Legal Basis for Processing

We process your personal information under one or more of the following lawful bases:

  • Contract – to process and manage your booking.
  • Legitimate Interests – to respond to enquiries and improve our website and services.
  • Legal Obligation – where we are required to retain certain records for legal, regulatory, tax or accounting purposes.
  • Consent – for optional cookies and marketing communications.

Payments

Payments made through our website are securely processed by PayPal or Stripe.

We do not store or have access to your full payment card details. Any payment information you provide is processed securely by the relevant payment provider in accordance with their own privacy and security policies.

Cookies

Our website uses cookies to ensure it functions correctly.

With your consent, we may also use analytics and other non-essential cookies to help us understand how visitors use our website so that we can improve its performance and usability.

Where required by law, non-essential cookies will only be used after you have provided your consent through our cookie preferences settings.

You can change or withdraw your cookie preferences at any time and can also manage cookies through your web browser settings.

For more information, please see our Cookie Policy.

Sharing Your Information

We do not sell or rent your personal information.

We may share your information with trusted third-party service providers where necessary to operate our website and manage enquiries, bookings and payments. These include:

  • Promote My Place, who hosts and maintains our website and booking system.
  • PayPal, who securely processes online payments.
  • Stripe, who securely processes online payments.

We may also disclose personal information where required by law or to comply with legal obligations.

Any third parties processing personal information on our behalf are expected to keep it secure and use it only for the purposes for which it has been shared.

International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where this occurs, appropriate safeguards will be in place to ensure that your personal information remains protected and is handled in accordance with UK data protection law.

How Long We Keep Your Information

We only keep your personal information for as long as necessary for the purposes for which it was collected.

Typically:

  • Enquiries that do not result in a booking may be retained for up to 12 months.
  • Booking information may be retained for up to 7 years where required for tax, accounting or legal purposes.

When personal information is no longer required, it is securely deleted or anonymised.

Keeping Your Information Secure

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

While no method of transmitting information over the internet is completely secure, we are committed to protecting the information you provide to us.

Your Rights

Under UK data protection law, you have the right to:

  • Request access to the personal information we hold about you.
  • Request that inaccurate or incomplete information is corrected.
  • Request that your personal information is deleted where appropriate.
  • Request that we restrict how we process your information in certain circumstances.
  • Object to certain types of processing.
  • Withdraw your consent at any time where processing is based on consent.
  • Request a copy of your personal information in a portable format where applicable.

To exercise any of these rights, please contact us at holidayhouseheacham@yahoo.com.

Complaints

If you have any concerns about how we use your personal information, please contact us first and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: https://www.ico.org.uk
Telephone: 0303 123 1113

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, our website or legal requirements.

Any updates will be published on this page and will take effect immediately upon publication.