Privacy Policy – Owl Lodges

Last updated: 1 July 2026

This Privacy Policy explains how Owl Lodges (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit https://www.owllodges.co.uk/, make a lodge booking, purchase add-on products, or contact us.

We are the data controller for personal information processed through this website. If you have any questions about this policy or how we handle your data, please contact us using the details in the Contact section below.

1. Information we collect

We may collect and process the following categories of personal information, depending on how you interact with us:

Identity and contact details — name, email address, telephone number, and postal address (for example when you complete a booking form, shop checkout, or contact us).
Booking and stay information — chosen lodge, arrival and departure dates, number of guests, optional extras (such as the dog stay fee at Too-wit Lodge), special requests, and correspondence relating to your stay.
Payment information — card payments are processed securely by Stripe. We do not store full card numbers on our servers; Stripe provides us with limited payment confirmation details needed to manage your booking or order.
Purchase information — if you buy experiences or products through our shop (for example a celebration hamper or art workshop), we collect order and billing details needed to fulfil that purchase.
Technical and usage data — IP address, browser type, device information, referring pages, and general site usage. This may be collected through server logs, cookies, and analytics tools when enabled.
Communications — emails, messages, and call notes when you contact us, plus marketing preferences where applicable.

2. How we use your information

We use personal information to:

process and manage lodge bookings and related payments;
send booking confirmations, pre-arrival information, and post-stay communications;
respond to enquiries and provide guest support before, during, and after your stay;
fulfil WooCommerce orders for optional add-on products and experiences;
operate, maintain, and improve our website and booking systems;
prevent fraud, abuse, and spam (including via automated checks such as reCAPTCHA where enabled);
comply with legal, tax, and accounting obligations;
measure website performance and advertising effectiveness where analytics or advertising tags are active.

3. Lawful bases for processing

Under UK data protection law, we rely on one or more of the following lawful bases:

Contract — to take steps at your request before entering into a contract, and to perform our contract with you (for example processing your booking).
Legitimate interests — to operate and improve our business, secure our website, and communicate with guests, balanced against your rights.
Legal obligation — where we must retain or disclose information to comply with applicable law.
Consent — where required, for example for non-essential cookies or optional marketing communications. You may withdraw consent at any time.

4. How we share your information

We do not sell your personal information. We may share it with trusted service providers who process data on our behalf, including:

Stripe — payment processing for lodge bookings and shop purchases (Stripe Privacy Policy).
Email and hosting providers — to send transactional emails and host the website.
Google — analytics and advertising tags (such as Google Analytics 4 or Google Ads) when configured in our site settings.
Meta (Facebook) — advertising pixel when configured.
Microsoft Bing — advertising tags when configured.
Google reCAPTCHA — spam and abuse prevention on booking forms when enabled.
OpenStreetMap / Leaflet — map tiles loaded on the contact page to show our approximate location.

We may also disclose information where required by law, court order, or to protect our rights, guests, or property.

5. International transfers

Some service providers (for example Stripe, Google, or Meta) may process data outside the UK. Where this occurs, appropriate safeguards are used in line with UK data protection requirements.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to keep the site working, remember preferences, and — when enabled — understand how visitors use the site or measure advertising performance.

Types of cookies we may use include:

Strictly necessary — required for core functionality such as booking sessions, security, and checkout.
Functional — to remember choices and improve your experience.
Analytics — to understand traffic and usage patterns (for example Google Analytics 4).
Advertising — to measure ad performance or support remarketing (for example Google Ads, Meta Pixel, or Microsoft Bing UET) when those tags are active.

You can control cookies through your browser settings. Blocking strictly necessary cookies may affect booking or checkout functionality. Analytics and advertising tags are only loaded when the relevant IDs are configured in our site settings.

7. Marketing

We may send service-related messages about your booking or order without separate consent. We will only send promotional marketing emails where permitted by law and, where required, with your consent. You can opt out of marketing at any time by using the unsubscribe link in an email or by contacting us.

8. How long we keep your information

We retain personal information only for as long as necessary for the purposes described in this policy, including:

booking and guest records — typically up to seven years after your stay for accounting, tax, and dispute-resolution purposes;
shop order records — as required for tax and consumer law;
enquiry records — for a reasonable period to handle follow-up and complaints;
server logs and analytics — for shorter operational periods according to provider settings.

9. Security

We use appropriate technical and organisational measures to protect personal information, including HTTPS encryption, access controls, and reputable payment and hosting providers. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Your rights

Under UK data protection law, you may have the right to:

request access to the personal information we hold about you;
request correction of inaccurate information;
request erasure in certain circumstances;
object to or restrict processing in certain circumstances;
request data portability where applicable;
withdraw consent where processing is based on consent;
lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.

11. Children

Our website and booking services are intended for adults making reservations. We do not knowingly collect personal information from children under 16 without parental consent.

12. Links to other websites

Our site may link to third-party websites (for example local attractions or partner venues). We are not responsible for the privacy practices of those sites and encourage you to read their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Please review this page periodically.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Owl Lodges
Nannerch, Mold
North Wales, UK
Email: cvl-lodges@outlook.com
Telephone: 07740 344 821