Legal
Privacy Policy
Last updated:
Who we are
UKGP Whalesborough Limited (company no. 14536788), trading as Whalesborough Farm Resort & Spa, is the data controller responsible for this website. Our resort is located at Whalesborough Farm, Marhamchurch, Bude, Cornwall EX23 0JD.
This privacy policy explains how we collect, use, and protect your personal information when you visit our website, make a booking, or contact us. It is published in accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
We are registered with the Information Commissioner's Office (ICO) under reference ZB513414.
What information we collect
We may collect the following personal information:
- Name, email address, telephone number, and postal address (when you make a booking or enquiry)
- Payment information (processed securely via our booking provider, Landal GreenParks)
- Details of your stay (cottage, dates, number of guests)
- Communication history (emails or calls with our team)
- Website usage data via cookies (see our Cookie section below)
How we use your information
We use your personal information to:
- Process and manage your booking
- Communicate with you about your stay
- Send you relevant offers and information (with your consent)
- Improve our website and services
- Comply with legal and regulatory requirements
Lawful basis for processing
We process your personal data on the following legal bases:
- Contract: to fulfil your booking and provide agreed services
- Legitimate interests: to improve our services and communicate with existing customers
- Consent: for marketing communications, which you can withdraw at any time
- Legal obligation: where required by law
Sharing your information
We do not sell your personal data. We may share it with:
- Landal GreenParks (our booking and management partner) for the purposes of processing your reservation
- Payment processors to handle secure transactions
- Third-party service providers who support our operations (under strict data processing agreements)
- Regulatory authorities where required by law
Data retention
We retain your booking data for up to 7 years for accounting and legal purposes. Marketing preferences are retained until you unsubscribe or withdraw consent.
Cookies
We take a deliberately privacy-first approach to measuring how our site is used. We use:
- Essential storage: necessary for the website to function correctly, such as remembering your cookie choices
- Analytics: to understand which pages are useful. We use Google Analytics 4 (which sets cookies and is processed by Google, with IP anonymisation enabled) alongside cookieless, privacy-first measurement (Plausible and our own first-party systems). Analytics are collected only after you accept the analytics category, and never sold. See our Cookie Policy for the full list and Google’s opt-out
- Advertising: to measure which of our Google Ads adverts led to a booking enquiry, and to show you our adverts on other websites. Our Google Analytics property is linked to Google Ads. This happens only if you accept the advertising category, which is asked for separately from analytics; data is shared with Google and may be processed outside the UK. We never sell your data. See our Cookie Policy
- Error monitoring: cookieless, first-party error monitoring that records technical details when a page fails — the page address, the error message and type, and basic browser information. It sets no cookies and no identifiers that single you out, runs under our legitimate interest in keeping the site secure and working, and is processed in our own UK-based systems
You can manage cookie preferences in your browser settings at any time.
Your rights
Under the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data (subject to legal obligations)
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at reception@whalesborough.co.uk or write to us at the address above.
Contact & complaints
If you have any questions about this privacy policy, or wish to exercise your data protection rights, you can contact our named privacy contact:
Privacy & general enquiries: reception@whalesborough.co.uk
Tel: 01288 361940
Address: Whalesborough Farm, Marhamchurch, Bude, Cornwall EX23 0JD
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.
International transfers
Our website analytics are processed by Supabase on servers located in the United Kingdom (London region), so that data is not transferred outside the UK. Some of our other service providers — our hosting platform Netlify (United States) and Google (United States, used for the embedded Google Map on our Finding Us page and for Google Analytics) — process data on servers located outside the United Kingdom. Where personal data is transferred to these providers, the lawful basis for transfer is the UK IDTA (International Data Transfer Addendum) appended to the EU Standard Contractual Clauses, supplemented by the appropriate technical and organisational safeguards required under the UK GDPR and the Data (Use and Access) Act 2025.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.