# Privacy Policy
**Last updated: 23 August 2026**
A Little Bit of Rough Ltd respects your privacy and is committed to protecting your personal information. This privacy policy explains what information we collect, how and why we use it, who we may share it with, how long we keep it and the rights available to you.
## 1. Who we are
A Little Bit of Rough Ltd is the data controller responsible for the personal information described in this policy.
**Contact details**
A Little Bit of Rough Ltd
Spindleberry Woods
Lambley Lodge Lane
Belton-in-Rutland
LE15 9JY
Email: info@alittlebitofrough.co.uk
If you have any questions about this policy or how we use your personal information, please contact us using the details above.
## 2. Information we collect
Depending on how you interact with us, we may collect:
– your name, address, email address and telephone number;
– booking details, including arrival and departure dates, accommodation selected, number of guests and information you choose to provide about your party;
– the names and, where relevant, ages of other guests, including children, when needed to administer a booking and ensure the accommodation is suitable;
– correspondence and information you provide by email, telephone, website enquiry form, our booking system or guest guide;
– payment and transaction information, although full payment-card details are handled securely by our payment provider and are not held by us;
– newsletter preferences and records of your consent;
– technical information generated when you use our website, such as your IP address, browser type, device information and cookie data;
– images captured by CCTV at our entrance gate and in our car park. Our CCTV does not record sound and does not cover the accommodation or private guest areas; and
– any other information you voluntarily provide, including accessibility requirements, dietary information or other details relevant to your stay.
Please avoid sending us sensitive personal information unless it is genuinely necessary for us to assist you. Where you provide health, accessibility or dietary information, we will use it only as needed to respond to your request or help provide your stay.
## 3. How we collect your information
We collect personal information when you:
– make or manage a booking;
– make a payment;
– contact us by email, telephone or through our website;
– use our Touch Stay digital guest guide;
– subscribe to our newsletter;
– visit our website or interact with its cookies; or
– enter an area covered by our clearly signed CCTV cameras.
We may also receive information from someone making a booking on your behalf or from service providers that help us administer your booking and payments.
## 4. How and why we use your information
We use personal information only where we have a lawful basis under data-protection law.
| Purpose | Lawful basis |
| — | — |
| Responding to enquiries and taking steps requested before a booking | Taking steps towards a contract |
| Administering bookings, payments, arrivals, stays and guest communications | Performance of our contract with you |
| Maintaining booking, payment, tax and accounting records | Compliance with legal obligations and our legitimate interests in running our business |
| Managing complaints, refunds, disputes, damage, security deposits and legal claims | Performance of our contract, compliance with legal obligations and our legitimate interests in protecting our business |
| Providing access to our Touch Stay digital guest guide and essential pre-arrival or safety information | Performance of our contract and our legitimate interests in providing a safe and well-managed stay |
| Sending newsletters and promotional emails | Your consent; you can withdraw it at any time |
| Operating and protecting our website and systems | Our legitimate interests in security and administration |
| Using entrance-gate and car-park CCTV for safety, site security and the prevention, detection and investigation of crime or incidents | Our legitimate interests in protecting guests, staff, property and the business |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and balance them against your rights and expectations.
We do not use personal information for solely automated decisions that produce legal or similarly significant effects.
## 5. Bookings and payments
We use SuperControl to administer availability, bookings and guest information. SuperControl processes this information on our behalf when providing its property-management and booking services.
Payments are processed through HolidayRentPayment by Yapstone, integrated with SuperControl. Payment information is submitted securely to the payment provider. We do not receive or retain your complete payment-card details, although we receive information about transactions, payments and refunds needed to administer your booking and keep financial records.
These providers may also process information for their own legal, regulatory, fraud-prevention and payment-service obligations. Their own privacy information applies where they act as independent data controllers.
## 6. Guest communications and Touch Stay
We use email, including a Gmail account provided through Google, to respond to enquiries and communicate with guests.
We use Touch Stay to provide digital guest information, arrival guidance, property instructions and important information connected with your stay. Information is shared with these providers only to the extent needed to provide and administer the relevant service.
## 7. Newsletter marketing
If you choose to subscribe to our newsletter, we use Mailchimp, an Intuit service, to store your subscription information and send our marketing emails. Mailchimp may collect information about the delivery and interaction with those emails, such as whether an email was opened or a link selected.
We send newsletter marketing only where you have consented. You can unsubscribe at any time by selecting the unsubscribe link in an email or contacting us at info@alittlebitofrough.co.uk. Unsubscribing from marketing will not prevent us from sending essential messages about an existing booking.
We do not sell your personal information or provide it to other organisations for their own marketing.
## 8. CCTV
CCTV operates at our entrance gate and in our car park for the safety and security of guests, staff and property and for the prevention, detection and investigation of crime and other incidents. Appropriate signs are displayed in the areas covered.
The cameras record images only. They do not record sound and do not cover the accommodation or private guest areas.
Recordings are stored securely using Reolink and access is restricted to authorised persons. CCTV footage is normally retained for no longer than 30 days and may be deleted sooner through automatic overwrite or cloud-storage settings. Relevant footage may be retained for longer where reasonably necessary to investigate an incident, respond to a request, establish or defend legal claims, comply with a legal obligation or assist law enforcement.
Footage may be disclosed where necessary and lawful to the police, emergency services, insurers, legal advisers or other persons involved in investigating an incident or legal claim. It will not be disclosed more widely unless required or permitted by law.
If you wish to request access to footage in which you appear, please contact us promptly and provide the approximate date, time, location and information that will help us identify the footage. Other identifiable people may need to be obscured before footage can be provided, and an exemption may apply in some circumstances.
## 9. Cookies and website information
Our website uses cookies and similar technologies where they are necessary for it to operate, maintain security and provide functions such as online booking or newsletter subscription. These technologies may process limited technical information such as an IP address, device type and browser information.
We do not use Google Analytics, the Meta Pixel or cookies for targeted advertising. You can control cookies through your browser, although disabling essential cookies may affect how the website or booking process works.
Where you use a third-party booking, payment or newsletter feature, the relevant provider may use cookies that are necessary to deliver and secure that service. Its own privacy and cookie information will apply to cookies it controls.
## 10. Who we share information with
Where necessary for the purposes described in this policy, we may share personal information with:
– SuperControl, for booking and property-management services;
– HolidayRentPayment by Yapstone, for payment processing;
– Touch Stay, for our digital guest guide;
– Google, for email and related business services;
– Mailchimp/Intuit, for newsletters and mailing-list management;
– Reolink, where CCTV recordings are stored through its cloud service;
– professional advisers, including accountants, insurers, solicitors and IT or website support providers;
– law-enforcement bodies, courts, regulators, emergency services or public authorities where disclosure is necessary or required by law; and
– a buyer, successor or adviser in connection with a proposed sale, reorganisation or transfer of our business, subject to appropriate confidentiality arrangements.
Service providers acting on our behalf are permitted to use personal information only as needed to provide their services and must protect it appropriately. Some providers may also act as independent controllers for particular activities, in which case their own privacy information will apply.
## 11. International transfers
Some of our service providers or their systems may be located outside the United Kingdom. Where personal information is transferred internationally, we require an appropriate safeguard recognised by UK data-protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful transfer mechanism. Providers may also apply additional technical and organisational security measures.
You may contact us if you would like more information about the safeguards relevant to your information.
## 12. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, insurance and reporting requirements and resolving disputes.
Our usual retention approach is:
– booking, payment and accounting records: generally six years after the end of the relevant financial year, or longer where required for a dispute or legal obligation;
– routine enquiries that do not result in a booking: normally up to two years after our last meaningful contact;
– guest correspondence connected with a booking, complaint, incident or claim: for as long as needed to administer the matter and, where relevant, establish or defend legal rights;
– newsletter information: until you unsubscribe or withdraw consent, after which we may retain minimal suppression information to ensure we respect your request;
– information about accessibility, health or dietary needs: only for as long as needed to respond to the request or provide the relevant stay, unless it must be retained in connection with an incident or legal claim; and
– CCTV: normally no longer than 30 days, unless relevant footage needs to be retained for one of the reasons explained in the CCTV section above.
We may securely delete or anonymise information earlier where it is no longer required.
## 13. Security
We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration or disclosure. Access is limited to people and providers who need the information for legitimate purposes.
No internet or electronic-storage system is completely secure. If we become aware of a personal-data breach, we will assess it and notify affected individuals and the Information Commissioner’s Office where legally required.
## 14. Your data-protection rights
Depending on the circumstances, you may have the right to:
– ask for access to the personal information we hold about you;
– ask us to correct inaccurate or incomplete information;
– ask us to erase information where there is no lawful reason to continue using it;
– ask us to restrict how information is used;
– object to processing based on legitimate interests;
– withdraw consent at any time where processing relies on consent;
– ask for certain information to be provided in a portable format; and
– complain about how your information has been handled.
These rights are subject to legal conditions and exemptions. To exercise a right, contact info@alittlebitofrough.co.uk. We may need to verify your identity and ask for information that helps us respond. We will normally respond within one month, as required by law.
## 15. Complaints
Please contact us first if you have concerns about how we use your personal information so that we can try to resolve them.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection:
**Information Commissioner’s Office**
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
## 16. Links to other websites
Our website and guest communications may contain links to websites operated by other organisations. We are not responsible for those websites or their privacy practices, and we encourage you to read their privacy information.
## 17. Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will be published on our website and the date at the top will show when it was last updated.