Privacy & Cookie Policy
Last updated: 9 October 2026
- Introduction
Croft House Barn is committed to protecting your privacy and handling your personal information responsibly. This Privacy and Cookie Policy explains how we collect, use, store and protect your personal information when you visit our website, make an enquiry or book a stay with us.
This policy applies to the website and any personal information you provide to us in connection with your enquiry or booking.
We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable.
- Who We Are
For the purposes of data protection legislation, the data controller responsible for your personal information is Croft House Barn, a self-catering holiday cottage located at:
Croft House Farm
Waterfall
Waterhouses
Staffordshire Moorlands
ST10 3HZ
United Kingdom
Contact details:
Email: stephanie@crofthousebarn.co.uk
Telephone: 01538 308125
Mobile: 07434 629335
If you have any questions about this policy or how we handle your personal information, please contact us using the details above.
- Personal Information We Collect
Depending on how you interact with us, we may collect the following types of personal information:
Contact information
- Your name.
- Email address.
- Telephone number.
- Postal address, where required for a booking or correspondence.
Enquiry and booking information
- Your requested arrival and departure dates.
- The number of guests included in your booking.
- Details of your enquiry, reservation and communications with us.
- Information required to manage your stay, including any relevant requests or arrangements you choose to share.
Payment information
If you make a booking, payment information may be processed through our booking system or payment service provider. We do not intend to collect or store your full payment card details ourselves where these are handled securely by a third-party payment provider.
Website and technical information
When you visit our website, certain technical information may be collected automatically, depending on the website services and settings in use. This may include your IP address, browser type, device information, pages visited and information about how you interact with the website.
Information you provide voluntarily
We may also collect any other information you choose to provide when contacting us, submitting an enquiry or communicating about your stay.
Please avoid sending sensitive personal information unless it is genuinely necessary for us to arrange your booking or respond to your request.
- How We Use Your Personal Information
We use personal information only where we have an appropriate lawful basis for doing so. This may include:
- Responding to enquiries and requests for information.
- Checking availability and managing reservations.
- Confirming bookings and communicating important booking information.
- Processing or arranging payments through the relevant payment provider.
- Preparing for your arrival and managing your stay.
- Responding to questions, complaints or requests for assistance.
- Maintaining appropriate business, financial and booking records.
- Meeting legal, tax, accounting and other regulatory obligations.
- Maintaining website security and understanding website performance, where applicable.
We will not use your personal information for unrelated purposes without an appropriate lawful basis.
- Our Lawful Basis for Processing
Under applicable data protection legislation, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following:
Contract: To take steps at your request before a booking is made, manage your reservation and fulfil our obligations to you as a guest.
Legal obligation: To maintain financial records, meet tax requirements and comply with other legal obligations.
Legitimate interests: To manage and improve our accommodation business, respond to correspondence, maintain security and protect our legitimate business interests, provided these interests do not override your rights and freedoms.
Consent: Where required, for example, for non-essential cookies or optional marketing communications.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
- How We Share Your Personal Information
We do not sell your personal information.
We may share relevant information with trusted third parties where necessary to operate our business and provide our services. These may include:
- Booking system providers, to manage availability, reservations and booking communications.
- Payment providers, to process payments securely.
- Website hosting and technical service providers, to operate, maintain and protect our website.
- Email and communication providers, to receive and respond to enquiries.
- Professional advisers and relevant authorities, where necessary to meet legal obligations or establish, exercise or defend legal claims.
We only share information where appropriate for the relevant purpose. Third-party service providers may process information in accordance with their own privacy policies and contractual obligations.
If you follow a link to an external booking platform or another third-party website, that service may collect and process your information under its own privacy policy.
- International Transfers
Some of our website, booking or other service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take steps to ensure that the transfer complies with applicable data protection legislation and that appropriate safeguards are in place where required.
- How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil bookings, maintain appropriate records and meet legal obligations.
For example:
- Enquiry information may be kept for as long as necessary to respond to the enquiry and manage any resulting arrangements.
- Booking and payment records may be retained for the period required by applicable tax, accounting and other legal requirements.
- General correspondence may be retained for as long as necessary to manage the matter concerned.
- Technical information and cookie data may be retained according to the relevant service provider’s settings and retention policies.
When information is no longer required, we will take reasonable steps to delete it or securely dispose of it, subject to any applicable legal retention requirements.
- How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmitting or storing information electronically is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
- Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
- Access the personal information we hold about you.
- Rectification of inaccurate or incomplete information.
- Erasure of your personal information in certain circumstances.
- Restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Data portability, where the legal conditions apply.
- Withdraw consent where processing is based on consent.
These rights are subject to applicable legal conditions and exemptions. For example, we may need to retain certain booking or financial records to comply with our legal obligations.
To exercise your rights, please contact us at stephanie@crofthousebarn.co.uk.
We may need to verify your identity before responding to certain requests.
- Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Website: https://ico.org.uk/
Telephone: 0303 123 1113
- What Are Cookies?
Cookies are small text files stored on your device when you visit a website. Similar technologies may also be used to store information or access information on your device.
Cookies can help websites function correctly, remember preferences, support security and provide information about how visitors use a website.
Our website may use cookies and similar technologies, depending on the website features, embedded services and settings in use.
- Types of Cookies
The cookies used on our website may fall into the following categories:
Strictly necessary cookies
These cookies are essential for the website or a service you have requested to function correctly. They may support security, navigation, booking functionality or the storage of your cookie preferences. They do not require consent where they meet the applicable legal exemption.
Functional cookies
These cookies may remember choices or preferences to provide a more convenient experience. Where they are not strictly necessary and do not qualify for an exemption, your consent will be requested before they are used.
Analytics and performance cookies
If website analytics tools are enabled, these cookies or similar technologies may help us understand how visitors use the website, which pages are popular and how the website performs. Non-essential analytics cookies will only be used where the required consent has been obtained.
Third-party cookies
Some website features, such as embedded booking systems, maps, videos or external services, may involve third-party cookies or similar technologies. Their use depends on the services integrated into the website and their configuration.
Where consent is required, these technologies will not be activated before you have given your permission.
- Managing Your Cookie Preferences
When you visit our website, you may be presented with a cookie notice allowing you to manage your preferences.
Where required, you can accept or reject non-essential cookies and change your choices later through the website’s cookie settings, if available.
You can also manage or delete cookies through your web browser settings. Please note that blocking strictly necessary cookies may affect some website functions.
Rejecting non-essential cookies should not prevent you from accessing ordinary website content.
- Third-Party Websites
Our website may contain links to external websites, including booking platforms, local attractions and other useful services.
We are not responsible for the privacy practices, content or security of external websites. If you visit another website, we recommend reviewing its privacy and cookie policies before providing personal information.
- Children’s Privacy
Our website and accommodation services are intended to be used by adults making enquiries or bookings. We do not knowingly collect personal information directly from children through the website unless it is necessary and appropriate in connection with a booking made by an adult.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter.
- Changes to This Policy
We may update this Privacy and Cookie Policy from time to time to reflect changes to our website, business practices, service providers or applicable legal requirements.
Any updated version will be published on this page, together with a revised “Last updated” date.
We encourage visitors to review this policy periodically.
- Contact Us
If you have any questions about this Privacy and Cookie Policy, your personal information or your cookie preferences, please contact:
Croft House Barn
Croft House Farm
Waterfall
Waterhouses
Staffordshire Moorlands
ST10 3HZ
United Kingdom
Email: stephanie@crofthousebarn.co.uk
Telephone: 01538 308125
Mobile: 07434 629335
We will be happy to assist with your enquiry.

