Wormald House Privacy Policy

Data protection

Wormald House Privacy Policy seeks to explain The type of personal information we collect and how it is used.

We currently collect and process the following information:

  • Personal identifiers such as full name, contact information and characteristics (for example, name and contact details) of persons over 16 years of age
  • Nationality
  • Arrival and departure dates

We may collect, store, and use the following categories of personal information about guests if it is deemed appropriate.

  • Information about health, medical conditions, dietary needs or disabilities.

How we get the personal information and why we have it

Most of the personal information we process is provided directly by the guest or the holiday booking company for the following reason:

  • To provide our Service (your requirements for bed & breakfast)

We use the information that guests give us in order to

  • Notify guests about changes to our Service
  • Provide support to guests
  • To detect, prevent and address technical issues
  • Risk mitigation: Verifying guest identity ensures that we know who is staying on our property, reducing the likelihood of disruptive or rogue guests.
  • Legal compliance: We are be legally required to gather certain information about our guests.
  • Guest and property safety: By collecting the right guest details, we can better manage any incidents that may arise, ensuring that we can protect our property and our guests.

We collect personal information about guests directly from themselves when they contact us via telephone, email, social media or through our website.

Occasionally we may employ third party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services or assist us in analysing how our Service is used.

These third parties have access to some guest Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Third parties may include your holiday booking company, for example, a restaurant, taxi service or other service that the guest requires.

We comply with comply with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). The lawful bases we rely on for processing this information are: 

  1. Guest consent. Guests are able to remove consent at any time. Guests can do this by contacting us using the contact form, by email (stay@nullwormaldhouse.co.uk) or telephoning 07815 903167.
  2. We have a legitimate interest.
  3. Where we need to perform the contract we have entered into with the guest.
  4. Where we need to comply with a legal obligation.

How we store personal information 

Guest information is securely stored via password protected cloud services. 

We keep guests contact details for a minimum of 12 months after completion of the guest departure as a legal requirement. Sometimes we may keep the information longer for guest support purposes. We typically includes a stay-count for regular guests of up to 10 stays for marketing purposes and discounts.

Guests data protection rights

Under data protection law, guests have rights including:

  • Right of access – the right to ask for copies of personal information. 
  • Right to rectification – the right to ask to rectify personal information that may be inaccurate (also the right to ask to complete information that may be incomplete). 
  • Right to erasure – the right to ask to erase personal information in certain circumstances. 
  • Right to restriction of processing – the right to ask to restrict the processing of personal information in certain circumstances. 
  • Right to object to processing – the the right to object to the processing of personal information in certain circumstances.
  • Right to data portability – the right to ask for the transfer of personal information to another organisation in certain circumstances.

If a request is made, we have one month to respond.

How to complain

Any concerns about our use of personal information can be addressed to us at the contact details above.

Guests can also complain to the Information Commissioner’s Office if unhappy with how we have used data.