Privacy Policy

1. Introduction

Welcome to Mardon Holiday Home ("we", "our", "us"). We are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, make an enquiry, book accommodation, communicate with us or use our services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws.

2. Who We Are

Mardon Holiday Home provides licensed self-catering holiday accommodation in Inverness, Scotland.

For any privacy-related questions, please contact us using the contact details provided on our Contact page.

3. Information We Collect

Depending on how you interact with us, we may collect:

Personal Information

• Full name
• Email address
• Telephone number
• Postal address (where required)
• Country of residence
• Number of guests
• Booking dates
• Special requests
• Emergency contact details (if provided)

Booking Information

• Reservation details
• Arrival and departure dates
• Property booked
• Booking reference
• Payment status
• Booking history

Payment Information

Payments are processed securely through third-party payment providers. We do not store your complete payment card details on our servers.

Technical Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Pages visited
• Time spent on pages
• Referring website
• Cookies and similar technologies

4. How We Collect Information

We collect information when you:

• Visit our website
• Complete an enquiry form
• Make a booking
• Contact us by email or telephone
• Communicate through our booking platform
• Leave a review
• Use live chat (if available)

5. How We Use Your Information

We use your information to:

• Process bookings
• Confirm reservations
• Provide customer support
• Respond to enquiries
• Manage guest stays
• Process payments
• Prevent fraud
• Improve our services
• Personalise your experience
• Send booking confirmations
• Send arrival information
• Send important service updates
• Comply with legal obligations

6. Legal Basis for Processing

We process personal information where:

• It is necessary to perform a contract with you.
• It is necessary to comply with legal obligations.
• We have a legitimate business interest.
• You have provided your consent.

7. Sharing Your Information

We may share information with trusted third parties where necessary to provide our services, including:

• Booking management systems
• Payment providers
• Website hosting providers
• Email service providers
• Analytics providers
• Customer support providers
• Government authorities where legally required

We only share information necessary for the relevant service.

8. Third-Party Services

Our website integrates with the following third-party services:

• Supabase (secure data storage)
• Airbnb, Booking.com and Vrbo (calendar availability sync)
• Google Maps (location display)
• WhatsApp (direct messaging)
• Resend (booking email correspondence)

Each provider has its own privacy policy governing how your information is processed.

9. Cookies

Our website uses cookies and similar technologies to:

• Remember your preferences
• Improve website performance
• Analyse visitor behaviour
• Enhance security
• Measure website traffic

Further information is available in our Cookie Policy.

10. Data Security

We take appropriate technical and organisational measures to protect your personal information.

These measures may include:

• SSL encryption
• Secure hosting
• Access controls
• Password protection
• Firewall protection
• Regular software updates
• Secure payment processing

While we take reasonable precautions, no online system can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only for as long as necessary to:

• Fulfil bookings
• Meet legal obligations
• Resolve disputes
• Maintain accounting records
• Protect our legitimate business interests

When information is no longer required, it is securely deleted or anonymised.

12. International Data Transfers

Some third-party providers may process information outside the United Kingdom.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place to protect your personal data in accordance with UK GDPR.

13. Your Rights

Under UK data protection law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with the relevant supervisory authority

We aim to respond to valid requests within one month.

14. Children's Privacy

Our website is intended for individuals aged 18 or over who are capable of making accommodation bookings.

We do not knowingly collect personal information directly from children without appropriate consent.

15. External Links

Our website may contain links to external websites.

We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy policies before providing personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on this website with the updated effective date.

17. Contact Us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us using the details provided on our Contact page.

If you are not satisfied with our response, you may have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).