Legal

Privacy Policy

Last updated: 13 May 2026

1. Who we are

This website operates the direct booking service for New Forest Log Cabin, a self-catering holiday property located at Sandy Balls Holiday Village, Fordingbridge, Hampshire SP6 2JW. The data controller for personal information collected through this site is Scott Dobson (bookings@newforestlogcabin.com).

2. What data we collect

When you make or enquire about a booking we collect:

  • Identity data — your name
  • Contact data — email address and phone number
  • Booking data — arrival and departure dates, number of guests, pets, selected extras and any special requests
  • Payment data — payment is processed by Stripe. We do not store card numbers or full payment details on our servers; Stripe holds this data under their own privacy policy
  • Communications — messages you send via our contact form or email

We do not use tracking cookies, advertising pixels, or third-party analytics tools. We do not collect data from visitors who merely browse the site without submitting a form.

3. How we use your data

PurposeLegal basis
Process and manage your bookingContract performance
Send booking confirmation and pre-arrival informationContract performance
Send balance payment remindersContract performance
Respond to enquiries and messagesLegitimate interests
Comply with legal obligations (e.g. guest registers)Legal obligation

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Third-party services

  • Stripe — payment processing. Your card data is handled entirely by Stripe and is subject to Stripe's Privacy Policy.
  • Mailjet — transactional email delivery (booking confirmations, pre-arrival emails). Mailjet may process your email address on servers within the EU.
  • Cloudflare — website hosting and security. Cloudflare processes request metadata in accordance with their privacy policy.

5. How long we keep your data

Booking records (name, email, dates, amounts) are retained for 7 years to meet HMRC record-keeping requirements. After that period records are permanently deleted. Enquiries that do not result in a booking are deleted after 12 months.

6. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data (subject to legal retention obligations)
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests

To exercise any of these rights, email bookings@newforestlogcabin.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Security

All data is transmitted over encrypted HTTPS connections. Payment data never touches our servers. Access to booking records is protected by authentication controls. We take reasonable technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.

8. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of our booking service after changes are posted constitutes acceptance of the revised policy.

9. Contact

For any privacy-related questions or requests: bookings@newforestlogcabin.com