Privacy notice (UK GDPR)

Controller: BHRC – British Hotel Reservation Centre (company and ICO registration details to be inserted).

What we collect: account details (name, email, phone), booking details, guest names, payment status (not card numbers), reviews, support messages and technical data needed to keep the service secure.

Why: to perform your booking contract (Art. 6(1)(b)), to meet legal obligations such as tax records (Art. 6(1)(c)), for fraud prevention and service security (legitimate interests, Art. 6(1)(f)), and for marketing only with your consent (Art. 6(1)(a)).

Sharing: with the Property you book (to deliver your stay), Stripe (payments), our email provider and hosting providers under data processing agreements. International transfers use UK-approved safeguards.

Retention: booking and financial records are kept for 6 years after the financial year end for HMRC purposes; other data is deleted or anonymised when no longer needed.

Your rights: access (download from Profile), rectification, erasure (delete account in Profile), restriction, objection and portability. You can complain to the Information Commissioner’s Office (ico.org.uk).