Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: 19 July 2026Introduction
St Clements Old Rectory ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or book accommodation with us.
1. Information We Collect
Personal Information
When you make a booking or contact us, we may collect:
Name and contact details (email, phone number, address)
Booking details (dates, apartment preferences, special requirements)
Payment information (processed securely through Stripe)
Communication preferences and correspondence with us
Technical Information
We automatically collect certain information when you visit our website:
IP address and browser type
Pages visited and time spent on our site
Device information and operating system
2. How We Use Your Information
We use your information to:
Process and manage your bookings
Send booking confirmations and receipts
Communicate with you about your stay
Improve our website and services
Comply with legal obligations
Send promotional materials (only with your consent)
Our Legal Basis for Processing
Contract: processing your booking, taking payment, and sending confirmations/arrival guides is necessary to perform our contract with you
Legal obligation: retaining booking/payment records for tax and accounting purposes
Legitimate interests: website security, fraud prevention, and improving our services, balanced against your rights
Consent: promotional emails and non-essential cookies (e.g. the Elfsight reviews widget) — you can withdraw this at any time
3. Payment Security
All payment transactions are processed securely through Stripe, a PCI-DSS compliant payment processor. We do not store your complete credit card details on our servers. Card information is encrypted and transmitted directly to Stripe's secure servers.
4. Sharing Your Information
We do not sell or rent your personal information to third parties. We may share your information with:
Service Providers: Stripe for payment processing, email service providers for communications
Legal Requirements: When required by law or to protect our rights
Business Transfers: In the event of a merger, acquisition, or sale of assets
Some of these service providers (for example Stripe) may process or store data outside the UK. Where this happens, we rely on safeguards recognised under UK data protection law, such as an adequacy decision or Standard Contractual Clauses, to ensure your data remains protected.
5. Cookies and Tracking
We use cookies and similar storage technologies. Here's exactly what we use:
| What it's for | Purpose | Type | Duration |
|---|---|---|---|
| Site security | Protects our forms (booking, contact) from tampering | Strictly necessary, first-party | Session |
| Cookie preference | Remembers your cookie choice (browser local storage, not a cookie) | Strictly necessary, first-party | 12 months |
| Payment protection | Fraud prevention during payment, set by our payment processor Stripe | Strictly necessary, third-party | Up to 1 year |
| Reviews widget | Loads and displays live TripAdvisor reviews via Elfsight | Optional, third-party — only loaded if you accept | Varies by provider |
You choose which optional cookies to allow when you first visit, and can change your mind at any time using the "Manage Cookies" link in the footer of every page. You can also control cookies through your browser settings, though disabling strictly necessary cookies may prevent parts of the site (such as booking or payment) from working.
6. Your Rights (GDPR/UK GDPR)
Under data protection law, you have the right to:
Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data
Restriction: Limit how we use your data
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interests
Withdraw consent: Where we rely on your consent (e.g. marketing emails, optional cookies), withdraw it at any time without affecting past processing
Complain: Lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have mishandled your data
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Booking records are typically retained for 7 years for accounting and tax purposes.
8. Security Measures
We implement appropriate technical and organizational measures to protect your personal information, including:
SSL/TLS encryption for data transmission
Secure storage with access controls
Regular security assessments and updates
Staff training on data protection
9. CCTV Monitoring
We operate CCTV cameras on our premises for the purposes of ensuring the safety and security of our guests, staff, and property. CCTV footage is recorded in public and communal areas only and is not used in private areas such as guest rooms or bathrooms.
CCTV recordings are retained for a limited period and are only accessed by authorised personnel. Footage may be shared with law enforcement or relevant authorities where required by law or in connection with the investigation of incidents. CCTV data is processed in accordance with UK GDPR and data protection legislation.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: [email protected]
Address: St Clements Old Rectory, Langworthgate, Lincoln, LN2 4AD
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.