Privacy Policy

1. Who We Are

Bluedaws Private Hotel ("we", "us", "our") is the data controller responsible for your personal information. We are located in Paddington, London.

Contact: bluedawsprivatehotel@gmail.com

If you have any questions about how we handle your personal data, please contact us at the email address above.

2. Personal Data We Collect

We collect the following information when you make a booking or send us an enquiry:

Booking data

• First name and last name
• Email address
• Phone number
• Country of residence
• Check-in and check-out dates
• Room type and number of guests
• Preferred payment method (card, bank transfer, or pay at hotel)
• Special requests or accessibility needs you choose to share

Contact form data

• First name, last name and email address
• Phone number (optional)
• Your message

We do not collect or store payment card numbers. If you choose to pay by card, payment is taken at the property.

We do not collect data about your browsing behaviour, use tracking pixels, or build marketing profiles.

3. How We Use Your Data

Purpose	Legal basis (UK GDPR Art. 6)
Processing and managing your room booking	Art. 6(1)(b) — Performance of a contract
Sending booking confirmation and updates by email	Art. 6(1)(b) — Performance of a contract
Responding to your contact form enquiry	Art. 6(1)(f) — Legitimate interests (responding to enquiries)
Keeping financial records as required by UK law	Art. 6(1)(c) — Legal obligation
Preventing fraud or misuse of our services	Art. 6(1)(f) — Legitimate interests (security)

We do not use your data for automated decision-making or profiling.

4. Who We Share Your Data With

We share your data only where necessary to operate our service:

• Google LLC (Gmail SMTP) — our booking confirmation and enquiry reply emails are sent via Google's email infrastructure. Your email address is transmitted to Google solely to deliver transactional messages. Subject to Google's privacy policy.
• Render.com — our cloud hosting and database provider. Your booking data is stored on their servers (Oregon, USA). Render provides appropriate safeguards. Subject to their privacy policy.
• GitHub Pages — hosts our website frontend. No personal data is stored by GitHub in connection with your visit.
• Google Fonts — loads website typography. Google may log your IP address. Subject to Google's privacy policy.

We do not sell, rent or trade your personal data with any third party for marketing purposes.

5. International Transfers

Your booking data is stored on Render.com servers in the United States. Render operates under appropriate data transfer mechanisms. By submitting a booking, you acknowledge this transfer. If you have concerns, please contact us before booking.

6. How Long We Keep Your Data

Data type	Retention period	Reason
Booking records	7 years from check-out	UK financial record-keeping requirements
Contact form messages	2 years from receipt	Legitimate interest in resolving follow-up enquiries
Cancelled bookings	2 years from cancellation	To handle disputes or re-bookings

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct inaccurate or incomplete data.
• Right to erasure — You can ask us to delete your data where we no longer have a legal basis to hold it.
• Right to restriction — You can ask us to restrict how we process your data in certain circumstances.
• Right to data portability — You can ask us to provide your data in a structured, machine-readable format.
• Right to object — You can object to processing based on legitimate interests.

To exercise any of these rights, email us at bluedawsprivatehotel@gmail.com. We will respond within one calendar month.

8. Cookies

Our website uses no marketing or tracking cookies. We use Google Fonts (which may set a session cookie). No cookie consent banner is required beyond this disclosure for these strictly functional purposes.

If you use the admin portal, a JWT authentication token is stored in your browser's localStorage for the duration of your session.

9. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

11. How to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority: