Legal
Privacy Policy
Last updated: 13 May 2026
1. Who we are
This website operates the direct booking service for New Forest Log Cabin, a self-catering holiday property located at Sandy Balls Holiday Village, Fordingbridge, Hampshire SP6 2JW. The data controller for personal information collected through this site is Scott Dobson (bookings@newforestlogcabin.com).
2. What data we collect
When you make or enquire about a booking we collect:
- Identity data — your name
- Contact data — email address and phone number
- Booking data — arrival and departure dates, number of guests, pets, selected extras and any special requests
- Payment data — payment is processed by Stripe. We do not store card numbers or full payment details on our servers; Stripe holds this data under their own privacy policy
- Communications — messages you send via our contact form or email
We do not use tracking cookies, advertising pixels, or third-party analytics tools. We do not collect data from visitors who merely browse the site without submitting a form.
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Process and manage your booking | Contract performance |
| Send booking confirmation and pre-arrival information | Contract performance |
| Send balance payment reminders | Contract performance |
| Respond to enquiries and messages | Legitimate interests |
| Comply with legal obligations (e.g. guest registers) | Legal obligation |
We do not sell, rent or share your personal data with third parties for marketing purposes.
4. Third-party services
- Stripe — payment processing. Your card data is handled entirely by Stripe and is subject to Stripe's Privacy Policy.
- Mailjet — transactional email delivery (booking confirmations, pre-arrival emails). Mailjet may process your email address on servers within the EU.
- Cloudflare — website hosting and security. Cloudflare processes request metadata in accordance with their privacy policy.
5. How long we keep your data
Booking records (name, email, dates, amounts) are retained for 7 years to meet HMRC record-keeping requirements. After that period records are permanently deleted. Enquiries that do not result in a booking are deleted after 12 months.
6. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention obligations)
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, email bookings@newforestlogcabin.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Security
All data is transmitted over encrypted HTTPS connections. Payment data never touches our servers. Access to booking records is protected by authentication controls. We take reasonable technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of our booking service after changes are posted constitutes acceptance of the revised policy.
9. Contact
For any privacy-related questions or requests: bookings@newforestlogcabin.com