Finsbay Cottages (‘we’, ‘us’, ‘our’) is committed to protecting your privacy. This Privacy Policy explains
how we collect, use, store and protect your personal data when you visit finsbaycottages.co.uk (the ‘Website’), make an enquiry, or book accommodation or fishing with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Finsbay Cottages is the data controller for the personal data described in this policy. Our contact details are:

• Address: Harris, Isle of Harris HS3 3JQ, United Kingdom
• Email: info@finsbaycottages.co.uk
• Telephone: 07795 244997

2. Information We Collect

We may collect and process the following categories of personal data:
Contact and identity data; name, email address, postal address and telephone number, provided when
you make an enquiry or booking.

Booking data; arrival/departure dates, lodge selected, number of guests, special requirements (e.g.
accessibility, dietary, dog-friendly stay), and any other details you provide as part of a booking.
Payment data; limited payment confirmation data; full card details are processed and stored by our
payment provider, not by us directly.

Communications; records of correspondence if you contact us by email, telephone or via the Website.
Technical and usage data; IP address, browser type, device information, pages visited and time spent on
the Website, collected via cookies and similar technologies (see our Cookie Policy).

3. How We Use Your Information

We use your personal data for the following purposes, and on the following legal
bases under UK GDPR:

To process and manage your booking and provide our accommodation/fishing services, necessary for
the performance of a contract with you.

To respond to enquiries and communicate with you about your stay, necessary for the performance of a
contract, or our legitimate interests in responding to enquiries.

To comply with legal and accounting obligations, including financial record-keeping, necessary for
compliance with a legal obligation.

To improve our Website and understand how visitors use it, via analytics, based on your consent, where
required (see Cookie Policy).

To send you information about your booking or, where you have agreed, occasional updates about
Finsbay Cottages, based on consent, which you may withdraw at any time.

4. Sharing Your Information

Finsbay Cottages — Legal Policies

Prepared by Machair Creative for Finsbay Cottages — June 2026
We do not sell your personal data. We may share limited personal data with trusted third parties who help
us operate our business, including:
Our website hosting and booking platform provider (WordPress.com and associated booking system),
which stores and processes booking enquiries made through the Website.
Payment processing providers, to handle deposit and balance payments securely.
Analytics providers (such as Google, via Google Tag Manager/Analytics), to help us understand Website
usage, only where you have consented to analytics cookies.
Professional advisers (such as accountants), where necessary for legal or accounting purposes.
Law enforcement or regulatory bodies, where we are required to do so by law.
Some of these providers may process data outside the UK/EEA; where this occurs, we ensure
appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this policy, including to
satisfy any legal, accounting or reporting requirements (generally up to 6 years from the end of a booking
for financial records). Enquiry data that does not result in a booking is retained for a shorter period,
typically up to 12 months, unless you ask us to delete it sooner.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, where there is no legal reason for us to retain it.
• Object to, or request restriction of, certain processing.
• Request a portable copy of data you have provided to us.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at info@finsbaycottages.co.uk. You also have the right
to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your
data has not been handled in accordance with the law.

7. Security

We take appropriate technical and organisational measures to protect your personal data against
unauthorised access, loss, or misuse, including using a reputable, secure website and booking platform
provider. However, no method of transmission over the internet is completely secure, and we cannot
guarantee absolute security.

8. Children

Our Website and services are not directed at children, and we do not knowingly collect personal data
directly from children. Booking details for children travelling as part of a family party are provided by the
adult party leader.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal
requirements. The ‘last updated’ date at the top of this page indicates when it was last revised.

Finsbay Cottages — Legal Policies

Prepared by Machair Creative for Finsbay Cottages — June 2026

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact
us at info@finsbaycottages.co.uk or Tel 07795 244997.