Privacy Policy
Last updated: October 2026
This policy explains how Highgate Howe Holiday Home Park (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website, make an enquiry, book a stay or contact us about buying a holiday home. We take your privacy seriously and aim to be clear about what we do.
Who we are
We are the data controller for the personal data described in this policy.
- Business name: Highgate Howe Holiday Home Park run by Lisa Trotter
- Address: Highgate Howe Holiday Home Park, Hawsker, Whitby, North Yorkshire, YO22 4JY
- Email: info@highgatehowe.co.uk
- Phone: 01947 603216
You can also contact us through our contact page.
What personal data we collect
Information you give us. When you fill in a form on our website, email or phone us, make a booking or enquire about buying a holiday home, we may collect:
- your name, address, email address and phone number;
- details of your enquiry, booking or stay, including dates and the number of people in your party;
- payment details, where you pay us directly (card details are handled by our payment provider and we do not store full card numbers);
- information you choose to tell us that is relevant to your stay, such as access needs or dietary requirements.
We do not ask for sensitive information (such as health details) unless it’s needed to look after you during a stay. If you give us any, we will only use it for that purpose.
Information we collect automatically. When you use our website, we and our service providers may collect:
- technical information, such as your IP address, browser type and version, device, operating system and time zone;
- information about your visit, such as the pages you view, how long you stay, how you found us and how you move around the site.
Most of this is collected through cookies and similar technologies (see “Cookies” below).
Information from other sources. If you book through a third party, such as an online travel agent or booking platform, we receive the details you gave them so that we can manage your booking. They are responsible for how they use your data, so please read their own privacy policies.
How and why we use your data
The law requires us to have a “lawful basis” for using your personal data. These are ours:
| What we do | Lawful basis |
|---|---|
| Deal with your enquiry, take and manage your booking, take payments and look after you during your stay | Contract (including steps you ask us to take before entering a contract) |
| Respond to enquiries about buying a holiday home and manage our relationship with owners | Contract or legitimate interests |
| Keep accounting and tax records, and meet other legal duties | Legal obligation |
| Keep our park, site and guests safe and secure, prevent fraud, and run and improve our website and services | Legitimate interests (running and protecting our business) |
| Send you marketing emails or texts about stays, offers and news | Consent, or “soft opt-in” for existing customers (see below) |
| Use analytics and marketing cookies that are not strictly necessary | Consent |
Marketing. We will only send you marketing by email or text if you have asked us to, or if you have previously booked with us or enquired about our services and we are contacting you about similar services, and you were given a chance to opt out. You can opt out at any time by using the unsubscribe link in any message or by contacting us. We do not sell your data to anyone.
Cookies
We use cookies and similar technologies on our website. A cookie is a small file stored on your device.
- Strictly necessary cookies make the website work, for example by remembering your cookie choices and keeping a booking system working. We do not need your consent for these.
Who we share your data with
We only share your data where we need to, and with people who must protect it. This includes:
- Service providers who help us run the business, such as website hosting and support, our booking and payment systems, email providers, and our accountants and professional advisers.
- Booking platforms and agents you booked through, where needed to manage your booking.
- Analytics and advertising providers, only for cookies you have agreed to.
- Regulators, the police or other authorities, where the law requires us to share data or where it is needed to prevent crime or protect people’s safety.
- A buyer or seller if we sell or buy any business or assets. They would have to use your data in line with this policy.
Our website may link to other websites. We are not responsible for their privacy practices, so please check their policies before giving them your data.
Where your data is stored
We store your data on secure servers, in the UK or the European Economic Area where possible. If any of our providers handle your data outside the UK, we make sure there are appropriate safeguards in place, such as an adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for more information.
Keeping your data safe
We use sensible technical and organisational measures to protect your data from loss, misuse and unauthorised access, such as secure connections (HTTPS), restricted access and keeping our systems up to date. No online transmission is ever completely secure, so please take care when sending us information. If we think there has been a data breach that puts your rights at risk, we will tell you and the ICO as the law requires.
How long we keep your data
We keep your data only as long as we need it for the purposes in this policy:
- Enquiries that don’t lead to a booking or sale: 12 months.
- Booking, payment and accounting records: 6 years after the end of the financial year, to meet tax and accounting rules.
- Marketing preferences: until you unsubscribe.
- Website analytics data: 14 months.
When we no longer need your data we delete it or anonymise it.
Your rights
Under data protection law you have the right to:
- be informed about how we use your data (which is the purpose of this policy);
- access a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- erase your data in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to us using your data where we rely on legitimate interests, and to direct marketing at any time;
- data portability, to receive your data in a commonly used format, or have it sent to another organisation, where we use it with your consent or under a contract;
- withdraw your consent at any time, where we rely on it. This will not affect anything we did before you withdrew it.
To use any of these rights, contact us using the details above. We will normally reply within one month and will not charge a fee, unless a request is clearly unfounded or excessive. We may need to check your identity first.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
Children
Our website is not aimed at children, and we do not knowingly collect data from anyone under 16 without a parent or guardian’s involvement. Bookings must be made by an adult.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “last updated” date. If we make a significant change, we will tell you where appropriate.