Privacy policy

1. Who we are

Joy By The Sea is operated by Jane O'Neill (sole trader), the data controller for any personal data you provide through this website or during the booking process. Contact: janeoneill12345@gmail.com or 07991 018210.

2. What data we collect

• Name, email and phone number
• Booking dates and guest count
• Any notes or special requests you provide
• Payment information — processed entirely by Stripe; we never see or store your card number
• Basic technical data (e.g. IP address, browser type) via privacy-respecting analytics

3. Why we use it (lawful basis)

• Contract: to manage and fulfil your booking
• Legitimate interests: to keep records for tax and dispute resolution, and to follow up on enquiries
• Consent: any optional marketing emails, where you opt in
• Legal obligation: where we're required by law (e.g. tax records)

4. Who we share it with

We only share your data with the third parties needed to deliver your booking:

• Stripe — payment processing
• Email provider — sending booking confirmation and pre-arrival emails
• WhatsApp (Meta) — optional message updates, if you contact us that way
• Cloudflare — website hosting

We do not sell your data, and we do not share it with marketing companies or holiday platforms.

5. How long we keep it

Booking records are kept for 6 years for tax and accounting purposes, in line with HMRC guidance. Enquiry-only data is deleted after 12 months. You can ask us to delete your data sooner — see your rights below.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything that's wrong
• Ask us to delete your data (where we don't have a legal duty to keep it)
• Object to processing or restrict it
• Request a portable copy of your data
• Withdraw consent at any time, for anything we do on a consent basis

To exercise any of these rights, email janeoneill12345@gmail.com. You can also complain to the Information Commissioner's Office.

7. Cookies

We use only essential cookies for site functionality. We do not use third-party tracking or advertising cookies. If we add analytics, we'll use a privacy-respecting tool (such as Plausible or Cloudflare Web Analytics) that doesn't require a cookie banner.

8. Changes to this policy

We'll update this page when our practices change. The "last updated" date at the top shows when we last changed anything substantive.