Effective Date: 2nd December 2025
High Hill Farm (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and store personal information when you use our website or make a booking.
Information we collect
We may collect the following information:
Personal details
Name, address, email, phone number
Booking details
Arrival/departure dates, number of guests, special requests
Payment information
Card details are never stored on our servers. Payments are processed via Stripe, a PCI-DSS compliant provider. For guests who consent, Stripe stores payment tokens for post-stay charges related to damage, loss, or additional services.
Website usage information
IP addresses, browser type, pages visited (collected via cookies or analytics tools)
How We Use Your Information
We use your personal data for:
Processing and managing bookings and payments
Charging for any agreed post-stay costs (damage, loss, excessive cleaning)
Sending booking confirmations, invoices, and pre-arrival information
Improving our website and services
Complying with legal obligations
We do not sell or share your personal data with third parties for marketing purposes without consent.
Legal Basis for Processing
We process your data on the following grounds:
Performance of a contract: To fulfil your booking and provide our services
Consent: For storing your card for potential post-stay charges or marketing communications
Legal obligation: Where required by law or regulation
Legitimate interests: For website functionality and improving our services
Payment Data and Saved Card Consent
All card payments are processed through Stripe. We never store full card numbers on our website or systems.
Guests who tick the consent checkbox on booking agree that we may store a card token and charge it post-stay for damage, loss, or excessive cleaning.
The consent record is stored in the booking system, linked to your booking ID.
Card data is retained only as long as necessary for processing payments or resolving disputes.
Cookies and Analytics
We use cookies to improve site functionality and track usage patterns.
Third-party analytics tools (e.g., Google Analytics) may collect anonymised data about how visitors interact with our site.
You can manage or disable cookies via your browser settings.
6. Data Sharing
We may share personal data with:
Stripe or other payment providers: for payment processing
Service providers: who perform services on our behalf (e.g., IT support, cleaning management)
Legal or regulatory authorities: if required by law
We never sell your data to third parties for marketing.
data retention
Booking and contact data: retained for the duration of the booking and for up to 7 years for accounting/legal purposes.
Payment tokens for consented post-stay charges: retained only as long as necessary, usually a few days post-checkout, unless a dispute is ongoing.
Marketing data: retained until you unsubscribe or withdraw consent.
Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Withdraw consent at any time
Object to or restrict processing
Request a copy of your data in a portable format
To exercise these rights, contact: info@highhillfarm.co.uk
Security
We implement appropriate technical and organisational measures to protect your personal data, including:
SSL encryption for website forms
Secure hosting and regular backups
Restricted access to staff handling bookings
PCI-DSS compliant payment processing via Stripe
minors
Our services are not intended for children under 18. We do not knowingly collect data from minors.
11. Changes to this privacy policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date.
12. contact
If you have any questions about this Privacy Policy or how we handle your data, please contact:
High Hill Farm
Email: info@highhillfarm.co.uk
Phone: 07777167954