Privacy Policy

Who we are

The Golf Cabin operates this website and the venue at Hudson House, Homeapple Hill, Wick, BS30 5QF. For any privacy question, contact us at hello@thegolfcabin.uk.

What we collect

• Booking & enquiry data, your name, email, phone, and the details of your booking or message.
• Payment data, card payments are processed by Stripe. We never see or store your card number; we keep only a payment reference and the amount.
• Technical & security data, privacy-friendly analytics (Plausible) that uses no cookies and does not track you across sites, plus server logs and error reports needed to keep the site secure and working. Where enabled, our forms are protected by Google reCAPTCHA, which receives your IP address and interaction data to detect spam and bots.

Why we use it, and our lawful basis

• To fulfil bookings, performance of a contract.
• To respond to enquiries, our legitimate interest in answering you.
• To send booking confirmations and reminders, performance of a contract.
• To keep the site secure and improve it, our legitimate interests.
• To prevent spam, fraud and abuse on our forms and payments, our legitimate interests.
• Marketing, only ever with your explicit consent, which you can withdraw at any time.
• Legal and tax records, to comply with a legal obligation.

Who we share it with

We use trusted processors who act only on our instructions under a data processing agreement: Stripe (payments), Google (reCAPTCHA spam protection on our forms), our email provider (booking and enquiry emails), Plausible (privacy-friendly analytics), our hosting provider (Render), and Sentry (error monitoring). We do not sell your data, and we never share it for third-party advertising. We may disclose data where the law requires it.

Our forms are protected by Google reCAPTCHA where it is enabled; Google’s Privacy Policy and Terms of Service apply.

International transfers

Some processors (for example Stripe, Google and Sentry) may process data outside the UK, including in the United States. Where they do, transfers are protected by UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or Standard Contractual Clauses.

How long we keep it

• Booking and payment records, 6 years, to meet tax and accounting obligations.
• Enquiry messages, up to 24 months.
• Marketing consent data, until you withdraw consent.

Your rights

You have the right to access, rectify, erase, restrict or object to our use of your data, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@thegolfcabin.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

We use a small number of cookies, explained in our Cookie Policy.

Security

The site is served over HTTPS, passwords are hashed, and access to personal data is limited to staff who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Children

Under-18s are welcome at the venue with an adult, but bookings and payments must be managed by an adult. We do not knowingly collect data from children online.

Changes

We may update this policy from time to time. The date above shows the latest version.

This policy is provided in good faith as general information. We recommend a final review by a qualified adviser for your specific circumstances.