Privacy Policy
At Melbury Rooms & Studios, we are committed to protecting your privacy and handling your personal data responsibly, in compliance with the UK General Data Protection Regulation (UK GDPR).
If you have any questions about this policy or how we handle your data, please get in touch.
The Data Controller
The data controller for Melbury Rooms & Studios is Mr E Massey, 4 Queen's Crescent, Exeter EX4 6AY.
Personal Data We Collect
Personal data is any information that can be used to identify you, either on its own or in combination with other information. We collect and store personal information that you provide to us in person, by phone, online, by email, or on a paper form. This may include:
- Your name, address, contact telephone numbers, and email address
- Details of how you heard about us
- Details about your stay, including arrival and departure dates, names and ages of people in your party, and details of monetary transactions, including partially obscured card numbers and expiry dates
- Additional notes or special instructions relating to your booking
- Online login details for your account, used to make and manage bookings
- Your marketing preferences
- Your feedback, opinions, and level of satisfaction
- Any other information you voluntarily send us via our website, email, or other online platform
How and Why We Process Your Data
We process your data in compliance with UK GDPR where processing is necessary for the performance of our contract with you, or for the legitimate interests of Melbury Rooms & Studios — such as service improvement, statistical analysis, marketing, and compliance.
We may use your personal data to:
- Make or take steps towards making a booking
- Administer your online account
- Respond to your request or enquiry
- Contact you regarding your booking
- Send you details of offers that we believe will be of genuine interest to you
You may opt out of marketing communications at any time — see the section below.
Sharing and Security of Your Data
We use trusted external software providers to manage our booking system, digital marketing, customer relationship management, payments, and other operational purposes. In all cases, your data is stored securely using industry-standard measures, including SSL encryption, multi-factor authentication, and physical access controls. Details of these providers are available on request.
Your data is not shared with any third party outside of these providers, except where required by law. Information about your visits to us is not disclosed to outside parties.
Retention of Your Data
We will not retain personal data for longer than is necessary for the purpose for which it was collected. We may retain anonymised booking data for statistical purposes indefinitely, but in these cases no personally identifiable information is kept.
Withdrawing Consent to Marketing
You may withdraw your consent to receive marketing communications at any time by contacting us or using the unsubscribe link in any marketing email. Your preferences will be updated within 48 hours. As we sometimes schedule communications in advance, it may take up to 7 days for the change to take full effect.
Your Rights
Under UK GDPR, you have the right to:
- Access your data and confirm it is being processed
- Rectify any inaccuracies in your data
- Request deletion of your data (though this may be refused if it is held for statistical purposes only)
- Restrict processing so that your data is stored but not actively processed further
- Object to processing for direct marketing purposes
To exercise any of these rights, please contact us directly. You may also lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how we have handled your data, though we would always encourage you to contact us in the first instance.
If You Choose Not to Provide Personal Data
In order to make a booking, you are required to provide certain personal data. This is a contractual requirement — without it, we are unable to confirm a reservation. By completing a booking, you confirm that the data provided is accurate and that you consent to its use as described in this policy.
Website Browsing Data
Behavioural data may be collected as you browse our website and may be linked to advertising networks. We do not personally identify you from this information. Please review our Cookie Notice for full details, including how to opt out of advertising-related tracking.