Montrose Guest House: Privacy Policy

Overview of data use

When first arranging a booking we require the booker’s name and contact details and payment card details to secure the booking via a deposit. On arrival, we then collect the names and contact details of all the guests arriving under the auspices of the original booking, any specific dietary requirements guests may have, and vehicle registrations if guests will be using our car park. For overseas visitors we are also obliged to collect additional information such as passport details and their next destination. Additionally we may then take payment card details to complete the payment owed for the booked stay. Guest’s personal data is collected for the following purposes:

Additionally, if paying by credit / debit card guest’s card details will be either processed by freetobook / stripe (if paying online) or via Worldpay (if paying over the phone or face-to-face) through the use of a Worldpay electronic point-of-sale (POS) terminal.

The legal basis for processing personal data

Sharing personal data

We treat personal data as strictly confidential and will never share guest’s data with third parties without consent unless there is a compelling legal requirement to do so.

Data retention

We maintain data only as long as we are required to do so either by law or for accounting purposes.

Data security

Paper records (e.g. guest registration forms) are kept in a secure office environment and destroyed after 1 year. Electronic records are either held on a personal laptop, which is password protected, or on a cloud storage platform which employs AES-256 bit encryption to ensure confidentiality and integrity. Only accounting relevant information is maintained for more than 1 year, and this tends to be minimal. All card processing – via freetobook / stripe or Worldpay is fully PCI-compliant.

Guest rights and personal data

Under General Data Protection Regulations (GDPR) guests have:

Further processing

If we wish to use guest data for a new purpose, not covered by this privacy policy, we will provide guests with a new notice explaining this new use prior to the commencement of this further processing. Note that the Montrose Guest House does not currently engage in any direct marketing activities and does not pass guest’s data to any third parties for marketing purposes.

Contact details

To exercise all relevant rights, queries of complaints please in the first instance contact the owners of Montrose Guest House (Andy and Helen Mountford) at montroseminehead@btinternet.com. You can contact the Information Commissioners Office on 0303 123 1113, or via email at ICO or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.