Effective Date: 2 July 2026

1. Who We Are

Courtyard Escapes is the data controller responsible for your personal data.

Contact details:

Email: info@courtyardescapes.co.uk

Address: R/O 50-51 High Street, Stourbridge, DY8 1DE

2. Information We Collect

We may collect and process the following personal data:

• Identity & Contact Data: name, email address, telephone number
• Booking Information: booking details and preferences
• Financial Data: billing address and payment confirmation (we do not store full card details)
• Technical Data: IP address, browser type, device information
• Usage Data: website interaction via cookies and analytics
• Communication Data: information you provide when contacting us

3. How We Use Your Information

We use your data to:

• Process and manage bookings
• Communicate with you (confirmations, reminders, enquiries)
• Deliver our services and experiences
• Process payments securely
• Improve our website and customer experience
• Comply with legal obligations
• Prevent fraud and maintain security
• Send marketing communications where permitted

4. Legal Basis for Processing

We process personal data under the UK GDPR using:

• Contract
• Legal obligation
• Legitimate interests
• Consent

5. Marketing Communications

You can unsubscribe at any time.

6. Payments

All payments are processed securely via trusted third parties. We do not store full card details.

7. Cookies

We use cookies to ensure functionality, analyse usage, improve experience, and measure marketing.

8. Sharing Your Information

We share data only when necessary with service providers, advisers, or authorities where required. We do not sell your data.

9. International Transfers

Where data is transferred outside the UK, appropriate safeguards are used.

10. Data Security

We use appropriate measures to protect personal data.

11. Data Retention

• Booking data: up to 6 years
• Enquiries: up to 12 months
• Marketing: until consent withdrawn

12. Your Rights

You have the right to access, correct, erase, restrict, object, and request portability of your data.

13. Complaints

You can contact the ICO at www.ico.org.uk or call 0303 123 1113.

14. Children’s Privacy

Data relating to children is provided by a parent or guardian.

15. Third-Party Links

We are not responsible for external websites.

16. Automated Decision-Making

We do not use automated decision-making.

17. Changes

We may update this policy from time to time.