Legal
Privacy Policy
Last updated:
Who we are
UKGP Whalesborough Limited (company no. 14536788), trading as Whalesborough Farm Resort & Spa, is the data controller responsible for this website. Our resort is located at Whalesborough Farm, Marhamchurch, Bude, Cornwall EX23 0JD.
This privacy policy explains how we collect, use, and protect your personal information when you visit our website, make a booking, or contact us. It is published in accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
We are registered with the Information Commissioner's Office (ICO) under reference ZB513414.
What information we collect
We may collect the following personal information:
- Name, email address, telephone number, and postal address (when you make a booking or enquiry)
- Payment information (processed securely via our booking provider, Landal GreenParks)
- Details of your stay (cottage, dates, number of guests)
- Communication history (emails or calls with our team)
- Website usage data via cookies (see our Cookie section below)
How we use your information
We use your personal information to:
- Process and manage your booking
- Communicate with you about your stay
- Send you relevant offers and information (with your consent)
- Improve our website and services
- Comply with legal and regulatory requirements
Lawful basis for processing
We process your personal data on the following legal bases:
- Contract: to fulfil your booking and provide agreed services
- Legitimate interests: to improve our services and communicate with existing customers
- Consent: for marketing communications, which you can withdraw at any time
- Legal obligation: where required by law
Sharing your information
We do not sell your personal data. We may share it with:
- Landal GreenParks (our booking and management partner) for the purposes of processing your reservation
- Payment processors to handle secure transactions
- Third-party service providers who support our operations (under strict data processing agreements)
- Regulatory authorities where required by law
Data retention
We retain your booking data for up to 7 years for accounting and legal purposes. Marketing preferences are retained until you unsubscribe or withdraw consent.
Cookies
We take a deliberately privacy-first approach to measuring how our site is used. We use:
- Essential storage: necessary for the website to function correctly, such as remembering your cookie choices
- Plausible Analytics: a privacy-focused analytics service that is first-party and cookieless, to understand which pages are useful. No personal data is collected, and it is only used after you accept analytics
- Google Analytics 4 (GA4): sets analytics cookies (
_ga,_ga_<container-id>) and transfers pseudonymised, IP-anonymised measurement data to Google. Used only after you accept analytics — see our Cookie Policy for detail - First-party analytics: a small anonymous record processed in our own systems, only after you accept analytics
- Error monitoring: cookieless, first-party error monitoring that records technical details when a page fails — the page address, the error message and type, and basic browser information. It sets no cookies and no identifiers that single you out, runs under our legitimate interest in keeping the site secure and working, and is processed in our own UK-based systems
- No advertising cookies: we do not use marketing or advertising cookies, and Google Analytics is configured not to track you across other websites
You can manage cookie preferences in your browser settings at any time.
Your rights
Under the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data (subject to legal obligations)
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at reception@whalesborough.co.uk or write to us at the address above.
Contact & complaints
If you have any questions about this privacy policy, or wish to exercise your data protection rights, you can contact our named privacy contact:
Privacy & general enquiries: reception@whalesborough.co.uk
Tel: 01288 361940
Address: Whalesborough Farm, Marhamchurch, Bude, Cornwall EX23 0JD
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.
International transfers
Our first-party website analytics and error monitoring are processed by Supabase on servers located in the United Kingdom (London region), so that data is not transferred outside the UK. Plausible Analytics processes data in the EU. Some of our other service providers — our hosting platform Netlify (United States) and Google (United States, used for Google Analytics 4 and for the optional embedded Google Map on our Finding Us page) — process data on servers located outside the United Kingdom. Where personal data is transferred to these providers, the lawful basis for transfer is the UK IDTA (International Data Transfer Addendum) appended to the EU Standard Contractual Clauses, supplemented by the appropriate technical and organisational safeguards required under the UK GDPR and the Data (Use and Access) Act 2025.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.