Introduction

Bluewood Lodges (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains how we collect, use, and store your information in accordance with UK GDPR.
 

Who We Are

Bluewood Lodges is the data controller responsible for your personal data.

Contact details:
Email: info@bluewoodlodges.com
 

Bluewood Lodges
B4450
Kingham
OX7 6UJ
 

Data We Collect
Guest Data

- We may collect and process:

- Name and contact details (email, phone number)
- Booking details and preferences
- Payment information (processed via third-party providers)
- Communications with us

Owner Data

- Where you are a lodge owner or prospective owner, we may also collect:

- Identification documents (e.g. passport or driving licence)
- Proof of address
- Ownership and contractual records
- Payment and financial details

How We Use Your Data

We use your personal data for the following purposes:

- To manage bookings and provide services (contract)
- To manage lodge ownership, agreements, and related services (contract)
- To comply with legal and regulatory obligations (legal obligation)
- To improve our services and operations (legitimate interests)
- To send marketing communications where you have given consent (consent)

Data Sharing

We do not sell your data.

We may share your data with trusted third parties where necessary, including:

- Payment processors
- Booking and property management systems
- IT and hosting providers
- Professional advisers (e.g. accountants or legal advisers where required)
 

All third parties are required to process your data securely and lawfully.
 

International Transfers

Some of our service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are in place to protect your data.
 

Data Retention

We only retain personal data for as long as necessary:

- Booking and financial records are typically retained for up to 6 years to comply with legal obligations
- Owner records are retained for the duration of ownership and for a reasonable period afterwards where required for legal, tax, or contractual purposes
- Identification and verification documents are retained only as long as necessary for compliance and record-keeping
- Marketing data is retained until you withdraw consent

Your Rights

Under UK data protection law, you have the right to:

- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Request transfer of your data (data portability)

- You also have the right to lodge a complaint with the Information Commissioner's Office.
 

Security

We take reasonable and appropriate measures to protect your personal data from unauthorised access, loss, misuse, or disclosure.
 

Updates

We may update this policy from time to time. The latest version will always be available on our website.