Privacy & Cookies
We are committed to ensuring that your privacy is protected. Should we ask you to provide information by which you can be identified when using this website, or by other means you can be assured that it will only be used in accordance with this privacy statement and the EU General Data Protection Regulation (GDPR).
Unless we are negligent in exercising our responsibilities then we shall not be held liable for unauthorised access to information supplied by you. We may occasionally change this policy by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
Creag Mhor Lodge uses a booking software known as Freetobook to enable our customers to make online bookings and manage those bookings.
This statement applies to the processing by Freetobook of personal data collected by Creag Mhor Lodge using Freetobook as our online booking system in relation to the provision of accommodation.
Your Personal Data
By using Freetobook as our booking engine, we collect and store information that you give when you make a booking. You are asked for your name, address, telephone number and email along with payment information and the names of any guests travelling with you. This may also include your IP address. This information is stored in the Freetobook System in order to process your booking. You may be contacted by us in relation to your booking.
Prior to your stay with us we also send an email containing the digital registration. In addition to the details already provided whilst making the booking you will be asked for your nationality and passport details if you are not a British citizen. In addition to this you will be asked the address of your onward destination. We are required by law to gather these details and maintain securely for 1 year under the Immigration (Hotel Records) Order 1972 .
The digital registration form also asks for details with regard to the vehicle you will be parking in the Creag Mhor Lodge car park.
Your data is also stored after you have stayed but will be kept no longer than necessary in order to comply with legal obligations.
Data processed directly by third parties
If you provide payment information, this will be processed directly by secure PCI Level 1 compliant payment gateway providers.
Joint Controllers
In the context of Freetobook providing booking software to Creag Mhor Lodge to facilitate online booking, Freetobook and the Creag Mhor Lodge shall together operate as joint data controllers for the processing of your personal data.
Security Procedures
In accordance with General Data Protection Regulation (GDPR), Freetobook and Creag Mhor Lodge observe reasonable procedures to prevent unauthorised access and misuse of personal information. We use appropriate business systems and procedures to protect and safeguard any personal information given to us. We also use security procedures and technical and physical restrictions for accessing and using the personal information on our servers. Only authorised personnel are permitted to access personal information in the course of their work.
Control of your Personal Data
You have the right to access data that is stored on behalf of Creag Mhor Lodge taking bookings via Freetobook system. You can email us a mail@creagmhorlodge.com to request an overview of your personal data.
You can also contact us on this address if you believe that the personal information that we have for you is incorrect, if you believe that we are no longer entitled to use your personal data or if you have any other questions about how your personal information is used or about the Privacy Statement.
Reviews
You may also be asked to send feedback after your stay in order for the Creag Mhor Lodge to further improve our service. Your email address will be used for this purpose. If you complete a review it may be posted on our website, facebook page, twitter or google plus. However, no identifying details will ever be attached to a review posting.
Links to other sites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
To Process your information as described above, we rely on the following legal bases:
Performance of a contract. The storage of your information may be necessary to perform the contract that you have with Creag Mhor Lodge who you are booking with.
Legitimate Interests. We may use your information for our legitimate interests, such as for administrative, fraud detection and legal purposes.
Cookies: A cookie is a small amount of data that is placed in the browser of your computer or on your mobile device. These cookies are used only to help you make a smooth booking and contain information like the date searched and language of booking. There is a difference between session cookies and persistent cookies. Session cookies will only exist until you close your browser. Persistent cookies have a longer lifespan and are not automatically deleted once you close your browser. We use persistent cookies in Google Analytics to analyse visitor traffic and behaviour.
By using the Creag Mhor Lodge website and the Freetobook booking system or proceeding with a booking you are consenting to the above use of cookies.
Our Business Contacts’ & Suppliers’ Data – Our policy is to ask for, or collect and store only the business and personal data necessary for conducting business purposes and for relevant record keeping. We ask our business contacts and suppliers to only share personal data where it is strictly needed for those purposes. Data may include name, position, phone number, email and other general contact details. In addition we may collect and store similar data from legitimate emails and business enquiries ie. sender name, recipient name, date and time, etc. We store and process this data in order to run our business smoothly and efficiently – ie. managing customer relationships, delivery of service, maintaining and using IT systems, administering and managing our website and online services, etc. Unless we are asked not to, we may use client and business contact details to provide information that we think will be of interest about us and relevant to our services.
The information we hold about you will not be shared with any other entity or organisation, without your explicit consent (or if required to do so by law) apart from our service providers who operate elements of our service and process data on our behalf – such as our email service providers Stack Mail and Microsoft outlook.