Last updated: August 2026
1. Who We Are
Farndish Manor is a private holiday let based in Bedfordshire, England.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Lucy Rand
Email: hello@farndishmanor.co.uk
Website: farndishmanor.co.uk
ICO registration reference: ZC106639
2. What Information We Collect
Information you provide directly
When you use our booking enquiry form or contact form, we may collect:
- Your name
- Email address
- Phone number
- Preferred arrival and departure dates
- Number of guests
- The occasion for your stay
- Any additional information you include in your message
Mailing list subscriptions
If you choose to join the Farndish Manor mailing list, we will collect your email address and any other information you choose to provide as part of the sign-up process.
You can choose to join our mailing list:
- through the Farndish Manor website;
- through an optional mailing-list sign-up within our Touch Stay digital guest guide; or
- through other optional sign-up opportunities that we may provide from time to time.
Regardless of where you are given the opportunity to join our mailing list, signing up is entirely optional and requires you to actively choose to receive marketing emails from Farndish Manor.
Where a mailing-list sign-up is offered alongside another service, such as access to our Touch Stay digital guest guide or guest Wi-Fi, you do not have to agree to receive marketing emails in order to use that service.
We may also record information relating to your marketing consent, such as when and how you subscribed, so that we can demonstrate and manage your marketing preferences.
Payment information
We currently accept payments by bank transfer (BACS). When you make a payment by bank transfer, we may receive information associated with that payment, such as your name, payment reference, the amount paid and relevant transaction details.
We may also offer payment by debit or credit card or other electronic payment methods in the future. Where we use a third-party payment processor, your payment information will be processed securely by that provider. We will not receive or store your full card number, expiry date or card security code unless specifically stated otherwise at the time.
Details of any third-party payment providers we use will be included in Section 6 of this policy.
Information collected automatically
When you visit our website, we automatically collect certain technical data through cookies and similar technologies (see Section 5), including:
- Your IP address (anonymised where possible)
- Browser type and version
- Device type and screen size
- Operating system
- Pages visited, time spent and referral source
- Approximate geographic location (city/region level, derived from IP)
3. How We Use Your Information
We use the information we collect to:
- Respond to your booking enquiries and manage reservations
- Process and record payments for your stay
- Communicate with you before, during and after your visit
- Improve our website and understand how visitors use it
- Analyse the effectiveness of our advertising
- Comply with legal obligations, such as tax and accounting requirements
- Maintain appropriate business, booking and financial records
- Where you have chosen to join our mailing list, send you marketing emails from Farndish Manor
Mailing list and marketing emails
If you choose to join the Farndish Manor mailing list, we will use the email address you provide to send you occasional marketing emails from Farndish Manor.
These may include inspiration for future stays, local recommendations, news, special offers and information about last-minute availability.
You may be offered the opportunity to join our mailing list through our website, through our Touch Stay digital guest guide or through other optional sign-up opportunities that we provide from time to time.
Joining our mailing list is entirely optional. It is not a condition of making a booking, staying at Farndish Manor, using our Touch Stay digital guest guide, accessing guest Wi-Fi or using any other service we provide.
You can unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us at hello@farndishmanor.co.uk.
We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
4. Our Legal Basis for Processing
Under the UK GDPR, we rely on the following lawful bases:
- Consent — for setting non-essential cookies (analytics and marketing), where you provide consent through an enquiry form where applicable, and where you actively choose to join our mailing list. You can withdraw consent at any time.
- Contract — where processing is necessary to fulfil a booking you have made or to take steps at your request prior to entering a contract, for example responding to an availability enquiry.
- Legitimate interests — for website security, fraud prevention, appropriate business administration and understanding general visitor behaviour in aggregate. We balance these interests against your rights and freedoms.
- Legal obligation — for maintaining financial, tax and other records where required by law.
Marketing consent
We rely on your consent to send you marketing emails when you actively choose to join the Farndish Manor mailing list.
You may be given the opportunity to provide this consent through our website, our Touch Stay digital guest guide or through other optional sign-up opportunities that we provide from time to time.
Where the opportunity to join our mailing list is presented as part of, or alongside, another service, your marketing choice will be optional. Choosing not to join our mailing list will not prevent you from accessing that service.
You may withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdrew it.
You can withdraw your consent by clicking the unsubscribe link in any marketing email or by contacting us.
5. Cookies & Tracking Technologies
A cookie is a small text file placed on your device when you visit a website. We use cookies to make the site function, to understand how it is used and to measure the effectiveness of our advertising.
You can control cookies through your browser settings or our cookie consent banner.
Essential cookies
These are required for the website to function and cannot be switched off. They do not store personally identifiable information.
| Cookie | Purpose | Duration |
| wordpress_sec_* | WordPress authentication (logged-in administrators only) | Session |
| wordpress_logged_in_* | Identifies logged-in WordPress users | Session |
| wp_lang | Stores language preference | Session |
| et-pb-* | Divi theme builder preferences | Session |
| cookie_consent | Records your cookie consent preference | 12 months |
Analytics cookies
These help us understand how visitors interact with the website by collecting and reporting information. They are set only with your consent.
| Cookie | Purpose | Duration |
| _ga | Google Analytics 4 — distinguishes unique visitors | 2 years |
| _ga_* | Google Analytics 4 — maintains session state | 2 years |
We use Google Analytics 4 (GA4). Information about Google’s processing and privacy practices is available in Google’s privacy information. You can also use Google’s browser add-on to opt out of Google Analytics where available.
Marketing cookies
These cookies may track your visit across websites to help us measure advertising and, where applicable, deliver more relevant advertising. They are set only with your consent.
| Cookie | Purpose | Duration |
| _fbp | Meta Pixel — browser identification for advertising and measurement | 3 months |
| _fbc | Meta Pixel — stores click identifiers from Meta advertising | 3 months |
| fr | Meta / Facebook — advertising delivery and measurement | 3 months |
The Meta Pixel helps us measure the effectiveness of advertising on Facebook and Instagram and may be used to show relevant advertising to people who have visited our website. Data is processed by Meta in accordance with its privacy information.
Managing cookies
When you first visit our website, a consent banner will ask you to accept or decline non-essential cookies.
You can change your preferences at any time using the cookie settings option provided on the website.
You can also control cookies through your browser settings. Disabling certain cookies may affect website functionality.
6. Who We Share Your Data With
We share your personal data only where necessary and with service providers or other third parties that help us operate Farndish Manor and provide our services. These may include:
- Banks and financial institutions — in connection with payments made to or from Farndish Manor.
- Google LLC — website analytics through Google Analytics 4.
- Meta Platforms Ireland Ltd and associated Meta companies — advertising measurement through the Meta Pixel.
- Website hosting and website service providers — which may process information on our behalf to host, maintain and secure our website.
- Email and mailing-list service providers — where we use a third-party service to manage or send correspondence and marketing emails, the information required to provide that service may be processed on our behalf.
- Touch Stay (JAM Start Ltd) — provider of our digital guest guide. If you choose to join our mailing list through the optional sign-up within the guide, information submitted through that feature may be processed through Touch Stay in order to pass or make the information available to us and/or our mailing-list service.
- Payment service providers — if we introduce card or other electronic payment facilities, the relevant provider may process your payment and associated personal information. We will update this policy to identify significant payment providers where appropriate.
We do not sell, rent or trade your personal data. We may disclose information where required by law, regulation or legal proceedings.
Where a service provider processes personal information on our behalf, we take appropriate steps to ensure that the information is handled in accordance with applicable data protection law.
7. How Long We Keep Your Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, tax, accounting, insurance, dispute-resolution and reporting requirements.
The appropriate retention period will depend on the type of information and why we hold it.
Our general retention periods are:
- Confirmed bookings and guest records — we generally retain records relating to confirmed bookings for up to six years after your stay, where reasonably necessary for accounting, tax, legal, insurance, dispute-resolution and business record-keeping purposes. Certain records may be retained for longer where required by law or where there is an ongoing legal, tax or other legitimate reason for doing so.
- Booking enquiries that do not result in a booking — we generally retain the enquiry and related correspondence for up to three years after our last communication, unless there is a reason to retain it for longer.
- General contact messages and correspondence — we generally retain these for up to three years after our last communication, unless the correspondence relates to a booking, financial transaction, complaint, dispute, legal matter or another purpose requiring longer retention.
- Payment and financial records — we retain relevant financial and transaction records for the period required to comply with applicable tax, accounting and legal obligations. This will commonly mean retaining relevant records for at least six years.
- Analytics data — according to the retention settings applied within the relevant analytics service.
- Cookie data — as specified in the cookie tables above.
- Mailing-list information — generally for as long as you remain subscribed. We may periodically review our mailing list and remove or anonymise information that we no longer need.
At the end of an applicable retention period, we will review whether we still need the information. Where there is no longer a lawful or legitimate reason to retain identifiable personal data, we will delete or anonymise it.
Unsubscribing and suppression records
If you unsubscribe or withdraw your consent to marketing, we will stop using your information to send you marketing emails.
We may retain a minimal record of your email address and your opt-out preference on a suppression or “do not contact” list.
This is used only to help us respect your preference and avoid inadvertently adding you back to our marketing mailing list.
8. Your Rights
Under the UK GDPR, you have rights in relation to your personal data. The rights that apply can depend on the circumstances and the lawful basis on which we process your information.
To exercise your rights, please contact us at hello@farndishmanor.co.uk. We will respond within the period required by applicable data protection law.
Your rights may include:
- Right of access — you can request a copy of the personal data we hold about you (a “subject access request”).
- Right to rectification — you can ask us to correct inaccurate or incomplete personal data.
- Right to erasure — you can ask us to delete your personal data in certain circumstances.
- Right to restrict processing — you can ask us to restrict the processing of your personal data in certain circumstances.
- Right to data portability — in certain circumstances, you can request personal data you have provided to us in a structured, commonly used and machine-readable format.
- Right to object — you can object to certain processing, including direct marketing.
- Right to withdraw consent — where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You have the right to object to the use of your personal data for direct marketing at any time. If you unsubscribe from the Farndish Manor mailing list, we will stop sending you marketing communications.
9. International Transfers
Some of the service providers we use may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the destination and provider, these safeguards may include UK adequacy regulations, an applicable UK data bridge, or approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
10. Children’s Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it where required.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, service providers or legal requirements.
Any changes will be posted on this page with an updated “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your attention.
12. Contact & Complaints
If you have any questions about this policy, your personal data, or wish to exercise any of your rights, please contact:
Lucy Rand — Data Controller
Email: hello@farndishmanor.co.uk
We aim to resolve any concerns directly with you. However, if you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint