Privacy Policy

Last updated 29th September 2026

We value your privacy and take care when handling your personal information.

This Privacy Policy explains how Bristowe Hill collects, uses, shares and protects your personal data, and how you can exercise your data protection rights.

  1. 1 / Who are we
  2. 2 / About this Privacy Policy
  3. 3 / Personal data we collect
  4. 4 / Automatically collected personal data
  5. 5 / How we use your personal data
  6. 6 / Sharing your information
  7. 7 / Payment information
  8. 8 / International data transfers
  9. 9 / Security
  10. 10 / How long we keep your information
  11. 11 / Your data protection rights
  12. 12 / Changes to our Privacy Policy
  13. 13 / Contact us

1 Who are we

This website is operated by Bristowe Hill Estates Limited (“Bristowe Hill”, “we”, “us” or “our”), a company registered in England and Wales under company number 02161747. Our registered office is at 2 Europe Way, Cockermouth, Cumbria, CA13 0RJ.

Bristowe Hill Estates Limited is the data controller responsible for the personal data described in this Privacy Policy. You can contact us using the details in the “Contact us” section below.


2 About this Privacy Policy

This Privacy Policy applies to personal data we collect when you visit our website, make an enquiry, book accommodation or communicate with us.

Personal data means information relating to an identified or identifiable person.

We handle personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

This policy explains our practices. Visiting our website does not, by itself, constitute consent to optional tracking or marketing.

Please also read our Cookie Policy for information about cookies and similar technologies.


3 Personal data we collect

We may collect the following information:

  • Booking information: Your name, contact details, stay dates, guest numbers, booking preferences and information needed to arrange and manage your reservation.
  • Payment and transaction information: Billing details, payment status and transaction records. Further information is provided in the “Payment information” section below.
  • Correspondence: Information you provide when contacting us by email, telephone or other means, including enquiries, requests, feedback and complaints.
  • Marketing preferences: Your choices about receiving marketing communications, where these are offered.
  • Information from booking partners: Reservation and contact details supplied by online travel agencies or other booking services when you book through them.

Some information is required to arrange or fulfil your booking. If you do not provide it, we may be unable to process your reservation or provide the requested service.


4 Automatically collected personal data

Our website and the services embedded within it may collect technical and usage information:

  • Server logs: Information such as your IP address, browser type, requested pages and the date and time of your visit. This helps support website operation, troubleshooting and security.
  • Cookies and similar technologies: These support website functionality, remember preferences and, where you allow them, measure website usage and advertising performance. See our Cookie Policy for further information.
  • Google Analytics: We use Google Analytics to understand website and booking-page activity, such as pages viewed, interactions, traffic sources and browser or device information. It uses identifiers that distinguish browsers and sessions; this information is not necessarily anonymous. Our website’s analytics tracking is controlled through your cookie preferences.
  • Meta Pixel: We use the Meta Pixel to help measure the effectiveness of Facebook and Instagram advertising. Depending on the page and integration, information sent to Meta may include pages visited, actions taken, booking events, browser and device information, IP addresses and cookie identifiers. Meta may associate this information with a Facebook or Instagram account and use it in accordance with its privacy policy. Our website’s Pixel tracking is controlled through your advertising cookie preferences.
  • Embedded booking services: Our Inn Style booking service may collect technical information and use cookies as you interact with the booking interface. Its payment and other integrated services may also process information needed to provide their features.

You can manage optional tracking through cookie settings.

For information about the providers’ practices, see Google’s Privacy Policy, Meta’s Privacy Policy and Inn Style’s Privacy Policy.

External websites linked from our website have their own privacy policies. Please review these when visiting those websites.


5 How we use your personal data

We use personal data for the following purposes and lawful bases:

  • Bookings and guest services: To respond to booking requests, arrange your stay, process payments and send booking-related communications. Our lawful basis is taking steps at your request before entering into a contract, or performing our contract with you.
  • Enquiries and complaints: To respond to questions, feedback and complaints. Depending on the circumstances, this is necessary for our contract with you or our legitimate interest in providing customer service and resolving issues.
  • Website operation and security: To maintain the website, troubleshoot problems and help prevent fraud or misuse. Our lawful basis is our legitimate interest in operating a secure and reliable service.
  • Analytics and advertising tracking: To understand website use and measure advertising performance through optional tracking technologies. For the analytics and advertising tracking controlled by our cookie banner, we rely on your consent.
  • Marketing communications: Where we offer these, we use your details with your consent, or where otherwise permitted by applicable marketing rules. You can unsubscribe or ask us to stop at any time.
  • Legal and accounting requirements: To maintain required records and respond to lawful requests from authorities. Our lawful basis is compliance with legal obligations.
  • Legal claims and business protection: To establish, exercise or defend legal claims and protect our business against fraud or other harm. Our lawful basis is our legitimate interest in protecting our business and legal rights.

Where we rely on legitimate interests, we consider the impact on your privacy and balance our interests against your rights.

Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew consent.


6 Sharing your information

We share information where needed for the purposes described in this policy:

  • Inn Style: Our booking platform, which processes information to support reservations and booking management.
  • Payment providers: Providers involved in processing payments and preventing fraud, including Stripe where used within the booking service.
  • Google: The provider of Google Analytics, which receives information associated with analytics activity when the relevant tracking is enabled.
  • Meta: The provider of the Meta Pixel and Facebook and Instagram advertising services, which receives information associated with advertising tracking when enabled.
  • CookieYes: Our cookie consent provider, which supports recording and managing visitors’ cookie preferences.
  • Other service providers and advisers: Hosting providers, IT support, authorised marketing contractors, accountants and professional advisers who need access to perform their work.
  • Authorities and other parties: Where disclosure is required by law or necessary to establish, exercise or defend legal claims.
  • Business transfers: Where necessary in connection with a proposed sale, transfer or restructuring of the business, subject to appropriate safeguards.

Some providers process information on our behalf under our instructions. Others, including advertising and payment providers, may also process information for their own purposes under their applicable terms and privacy policies.

Meta’s Business Tools terms describe the respective responsibilities for information collected and transmitted through its tools, including joint-controller arrangements where applicable.

We limit access to information to what is needed for the relevant purpose.


7 Payment information

Online card payments are processed by payment providers through our booking service.

We do not directly store full card numbers or card security codes. We may receive transaction information, payment status and other details needed to manage your booking, accounts or refunds.

Payment providers may also process information for fraud prevention, security and legal compliance. Their privacy policies explain their practices.


8 International data transfers

Some of our providers operate internationally. Personal data may therefore be processed outside the United Kingdom, including in the United States and other countries.

Where a transfer is subject to UK data protection transfer rules, it must be covered by an applicable UK adequacy regulation or another permitted transfer mechanism. Appropriate safeguards may include the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, depending on the arrangement.

You can contact us for information about the safeguards applicable to transfers of your personal data.


9 Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access is limited to people and providers who need the information for their work.

No method of transmission over the internet or electronic storage is completely secure. If you have an account with our booking service, keep your login details confidential.


10 How long we keep your information

We keep personal data only for as long as needed for the purposes described in this policy, including applicable legal, accounting and reporting requirements.

  • Customer and booking records: We retain these for six years after the end of your reservation.
  • Enquiries and correspondence: We generally retain these for two years after our last contact with you, unless they form part of a booking record or are needed for an ongoing complaint, legal claim or legal obligation.
  • Marketing records: Where you consent to marketing, we retain the relevant information until you unsubscribe or it is no longer needed. We may retain a minimal record of your opt-out to prevent further unwanted marketing.
  • Cookies and tracking information: Cookie durations are available through cookie settings. Information held by analytics and advertising providers may have different retention periods from the cookies themselves, depending on service settings and the providers’ policies.

Retention periods may be extended where needed to resolve disputes, establish or defend legal claims, or comply with legal requirements.

When information is no longer needed, we delete it or anonymise it.


11 Your data protection rights

Depending on the circumstances, you have the following rights:

  • Access: To request a copy of your personal data and information about how we use it.
  • Rectification: To ask us to correct inaccurate information or complete incomplete information.
  • Erasure: To ask us to delete your personal data where the relevant conditions apply.
  • Restriction: To ask us to restrict our use of your personal data in certain circumstances.
  • Data portability: To receive certain information in a structured, commonly used and machine-readable format, where processing is automated and based on consent or a contract.
  • Objection: To object to processing based on legitimate interests for reasons relating to your circumstances. You can object to direct marketing at any time.
  • Withdrawal of consent: To withdraw consent where we rely on it. For optional website tracking, you can use cookie settings.
  • Complaint: To complain to the Information Commissioner’s Office, or another competent data protection authority where applicable.

To exercise your rights, contact us using the details below. We may need information to verify your identity.

Requests are normally free of charge. In circumstances permitted by law, such as manifestly unfounded or excessive requests, we may charge a reasonable fee or refuse a request.


12 Changes to our Privacy Policy

We may update this Privacy Policy when our services or data handling practices change. The latest version will be published on this page, with the updated date shown above.

Where required, we will also notify you of significant changes.


13 Contact us

For questions about this policy or to exercise your data protection rights, please contact:

Bristowe Hill Estates Limited

Correspondence address:
Bristowe Hill
c/o Treeby & Bolton
12 Lake Road
Keswick
Cumbria
CA12 5BX

Email:
stay@bristowehill.co.uk

Registered office:
2 Europe Way
Cockermouth
Cumbria
CA13 0RJ

Company number: 02161747