top of page

Privacy Policy

A legal disclaimer

​

Last updated: 24/06/2026

​

Stay in Whitby ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make a booking, or otherwise interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to our website: stay-in-whitby.co.uk and covers our accommodation venues, including Endeavour, The Anchor Room, Driftwood Den and Marimar.

​

1. Who We Are

Stay in Whitby is based in Whitby, North Yorkshire, and provides holiday and short-stay accommodation.

Data Controller contact details:

  • Business name: Stay In Whitby

  • Address: The Endeavour, 66 Church Street, Whitby, North Yorkshire, YO224AS

  • Email:  maria@stay-in-whitby.co.uk

 

If you have any questions about this policy or how we handle your personal data, please contact us using the details above.

​

2. Information We Collect

We collect personal information in the following ways:

a) When you make a booking

When you book accommodation through our online booking system, we collect:

  • Full name

  • Contact details (email address, phone number, postal address)

  • Booking dates and accommodation preferences

  • Payment information (processed securely by our payment provider — see Section 4)

  • Number of guests, and details of any pets travelling with you

  • Any special requests or additional information you provide to us

b) When you contact us

If you contact us via our website or email, we may collect your name, contact details, and the content of your message in order to respond to your enquiry.

c) When you subscribe to our newsletter

If you sign up to receive marketing emails or updates from us, we collect your name and email address for this purpose.

d) Automatically, through cookies and analytics

When you visit our website, we use Google Analytics to collect information about how visitors use our site, including:

  • Pages visited and time spent on the site

  • Approximate location (based on IP address)

  • Browser and device type

  • Referral source (how you found our website)

This information is collected anonymously/in aggregate and helps us understand how our website is used so we can improve it. See Section 6 for more on cookies.

​

3. How We Use Your Information

We use your personal information to:

  • Process and manage your booking

  • Communicate with you about your stay (confirmations, check-in details, etc.)

  • Respond to enquiries and provide customer support

  • Send marketing communications, where you have opted in (you can unsubscribe at any time)

  • Improve our website and services through analytics

  • Comply with legal and accounting obligations

  • Protect our business, guests, and property (for example, in relation to bookings, safety, or disputes)

Legal basis for processing

We process your personal data on the following legal grounds:

  • Contract: to fulfil your booking and provide the accommodation you have paid for

  • Consent: for marketing emails and non-essential cookies, which you can withdraw at any time

  • Legitimate interests: for website analytics and improving our services

  • Legal obligation: where we are required to retain certain records (e.g. for tax purposes)

 

4. Sharing Your Information

We do not sell or rent your personal data. We may share your information with trusted third parties who help us run our business, including:

  • Payment processor: to securely process payments for your booking. We do not store full card details ourselves.

  • Booking system provider: the platform used to manage and process your reservation.

  • Email marketing platform: if you have subscribed to our newsletter, used to send marketing communications.

  • Google Analytics: for website usage statistics.

  • Professional advisors, such as accountants, are necessary for legal or financial reasons.

  • Authorities: where required by law, for example, to comply with a legal obligation or protect our rights, property, or safety.

 

All third parties we work with are required to handle your data securely and in line with data protection law.

 

5. Where Your Data Is Stored

Your data is stored securely using reputable service providers. Where data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

 

6. Cookies

Our website uses cookies, including Google Analytics cookies, to help us understand how visitors use our site and to improve your browsing experience.

Cookies are small text files stored on your device. You can control or delete cookies through your browser settings at any time. Please note that disabling cookies may affect how our website functions.

For more information about Google Analytics and how Google processes data, please visit Google's Privacy & Terms page.

 

7. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:

  • Booking and guest information: typically retained for [insert period, e.g. "6 years"] to meet legal, accounting, and tax obligations.

  • Marketing data: retained until you unsubscribe or withdraw consent.

  • Enquiry data: retained for as long as reasonably needed to resolve your enquiry, then deleted or anonymised.

 

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete data

  • Erase your data, in certain circumstances ("right to be forgotten")

  • Restrict or object to certain processing

  • Data portability, where applicable

  • Withdraw consent at any time, where processing is based on consent (e.g. marketing emails)

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled:

 

9. Children's Privacy

Our services are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

 

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

 

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

The Endeavour 

66 Church Street, Whitby,

North Yorkshire, YO224AS

 maria@stay-in-whitby.co.uk

​

​

bottom of page