Privacy Policy

Last updated: 19th February 2026

Judds Folly Hotel (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website www.juddsfollyhotel.co.uk, contact us, or use our services.

This policy is written in accordance with: - The UK General Data Protection Regulation (UK GDPR) - The Data Protection Act 2018 - Privacy and Electronic Communications Regulations (PECR)

1. Who We Are

Judds Folly Hotel is the data controller responsible for your personal data.

Contact details:

Judds Folly Hotel

Syndale Park, London Road, Faversham ME130RH

Email: juddsfollyhotel@gmail.com

Telephone: 01795 591818

If you have any questions about this policy or how we handle your data, please contact

us using the details above.

2. Personal Data We Collect

We may collect, use, store, and transfer different kinds of personal data, including:

a) Information you provide to us

• Name

• Email address

• Telephone number

• Postal address

• Booking details and preferences

• Payment-related information (processed securely by third-party paymentproviders; we do not store full card details)

• Messages sent via contact forms, email, or phoneb) Information collected automatically When you visit our website, we may automatically collect: - IP address - Browser type and version - Device information - Pages visited and time spent on the site - Referring website addresses This data is collected using cookies and similar technologies.

3. How We Use Your Personal Data

We use your personal data for the following purposes: - To manage hotel bookings, events, and enquiries - To communicate with you regarding your reservation or enquiry - To process payments and prevent fraud - To improve our website, services, and customer experience - To comply with legal and regulatory obligations - To send marketing communications where you have consented or where permitted by law

4. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Contract: where processing is necessary to perform a contract with you

(e.g. hotel bookings)

• Legal obligation: where required to comply with legal requirements

• Legitimate interests: to operate and improve our business, provided your rights do not override these interests

• Consent: where you have given clear consent (e.g. marketing emails) You may withdraw consent at any time by contacting us.

5. Marketing Communications

We may send you marketing communications about offers, events, or services if: - You have opted in to receive them (for example, by subscribing to our newsletter), or - You are an existing customer and the law allows us to contact you under PECR.

Newsletter subscriptions are managed using Mailchimp or WIX, a third-party email marketing platform. If you subscribe to our newsletter, your name and email address will be stored and processed by Mailchimp or WIX in accordance with their privacy policy. You can opt out of marketing communications at any time by: - Clicking the unsubscribe link in any marketing email, or - Contacting us directly.6. Cookies

Our website is built using Wix and uses cookies and similar technologies to distinguish you from other users and improve your browsing experience. We use Usercentrics as our cookie consent management platform to help you manage and control your preferences.

Cookies may be used for the following purposes:

• Essential cookies – to enable core website functionality and ensure the site operates correctly

• Analytics cookies – to analyse website traffic, usage, and performance

• Preference cookies – to remember your settings and choices

• Marketing cookies – to deliver relevant marketing content, measure the effectiveness of our campaigns, and personalise advertising across platforms

You can manage or withdraw your cookie consent at any time via the Usercentrics cookie banner or through your browser settings.

7. Sharing Your Personal Data

We do not sell your personal data. We may share or receive your personal data from trusted third parties where necessary to provide our services. These include: - Website and IT service providers (including Wix) - Email marketing

providers (Mailchimp and Wix) - Payment processors - Professional advisers (such as

accountants and legal advisers)

We also receive booking-related personal data from third-party hotel booking platforms

and Online Travel Agents (OTAs), including:

Best Western - Booking.com - Expedia -Infotel - Other associated OTA partners

These platforms provide us with customer information necessary to managereservations, such as name, contact details, stay dates, and booking preferences.

All third parties are required to respect the security of your personal data and to process it lawfully and in accordance with data protection legislation.8. International Transfers. We do not routinely transfer your personal data outside the UK. Where any data is transferred internationally, we ensure appropriate safeguards are in place, such as

adequacy regulations or standard contractual clauses.

9. Data Security

We have put appropriate technical and organisational measures in place to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. Access to your personal data is limited to those employees and partners who have a legitimate business need to know.

10. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements. Booking and financial records may be retained for statutory periods required by UK law.

11. Your Data Protection Rights

Under UK GDPR, you have the right to: - Access your personal data - Request correction of inaccurate data - Request erasure of your data - Object to or restrict processing - Request data portability - Withdraw consent at any time

To exercise any of these rights, please contact us using the details above.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority: Information Commissioner’s Office (ICO)

Website: https://www.ico.org.uk

Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the

ICO.13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this

page, and where appropriate, notified to you by email.

Please check this page regularly for updates.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please

contact:

Judds Folly Hotel

Email: juddsfollyhohotel@gmail.com