PRIVACY NOTICE

Last updated: August 29, 2025

Thank you for choosing to be part of our community at Orsett Hall Hotel, Restaurant & Spa ("Company", "we", "us", "our"). We are committed to protecting your personal data and your right to privacy.

If you have any questions or concerns about this privacy notice or our data practices, please contact us at reception@orsetthall.co.uk.

This privacy notice applies when you use our Website https://www.orsetthall.co.uk, make a booking with us, stay as a guest, visit our spa, restaurant or attend an event, or otherwise interact with us (collectively, the "Services").

Please read this notice carefully to understand how we handle your personal information, your rights, and how you can exercise them.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE USE YOUR INFORMATION?

3. SHARING YOUR INFORMATION

4. DATA RETENTION

5. INTERNATIONAL DATA TRANSFERS

6. YOUR PRIVACY RIGHTS

7. CHILDREN

8. SECURITY

9. UPDATES TO THIS NOTICE

10. CONTACT US

1. What Information Do We Collect?

We collect personal data in the following ways:

  • Information you provide directly – including your name, contact details (email, phone, postal address), booking details, dietary preferences, and correspondence with us.

  • Payment data – if you make purchases, we collect payment details. Payments are securely processed via third-party providers such as Stripe. (See their policy: https://stripe.com/en-gb/privacy).

  • Automatically collected information – such as IP address, browser type, device details, usage data, and location (where permitted).

  • Special category data – such as accessibility or dietary requirements, collected only where necessary to provide appropriate services.

For more information on cookies and online tracking, see our Cookie Policy.

2. How Do We Use Your Information?

We process personal information to:

  • Manage reservations, event bookings, and guest services.

  • Process payments and issue invoices.

  • Communicate with you, including confirmations and updates.

  • Send you marketing (where permitted by law and subject to your preferences).

  • Ensure the safety and security of our guests, staff, and premises.

  • Comply with legal and regulatory obligations (e.g., accounting, tax, licensing).

Our lawful bases for processing include contract performance, legal obligations, legitimate interests, and consent where applicable.

3. Sharing Your Information

We share your data only when necessary, including with:

  • Service providers – e.g., payment processors (Stripe), booking platforms, IT and website support, Wi-Fi providers, email and marketing services.

  • Legal and regulatory authorities – when required by law.

  • Business transfers – in the event of a merger, sale, or reorganisation.

We do not sell your personal data.

4. Data Retention

We retain your personal information only for as long as necessary:

  • Guest booking records – up to 7 years (for legal and accounting purposes).

  • Marketing data – until you withdraw consent or unsubscribe.

  • CCTV recordings – typically retained for 30 days, unless required for investigations.

When retention is no longer necessary, data is securely deleted or anonymised.

5. International Data Transfers

If your personal information is transferred outside the UK, we ensure appropriate safeguards are in place (e.g., UK-approved Standard Contractual Clauses).

6. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have rights to:

  • Access your personal data.

  • Request correction or deletion.

  • Restrict or object to processing.

  • Withdraw consent for marketing.

  • Data portability (where applicable).

You may also lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk.

7. Children

We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such data, we will delete it promptly.

8. Security

We use appropriate organisational and technical measures to protect your data. However, no system is completely secure. Transmission of data is at your own risk.

9. Updates to this Notice

We may update this privacy notice from time to time. Updates will be posted on our Website with the latest revision date.

10. Contact Us

For privacy-related queries or requests, please contact:

Orsett Hall Hotel, Restaurant & Spa
Prince Charles Avenue
Orsett, Essex RM16 3HS
United Kingdom
E: reception@orsetthall.co.uk