Privacy & Cookie Policy

Last updated: September 2026

At tenbystays.com, we respect your privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, and protect your information, as well as how we use cookies.

1. Who We Are Tenby Stays operates tenbystays.com. For the purposes of data protection law, we are the data controller of your personal information. Our website and direct booking engine are hosted and powered by Lodgify.

2. Information We Collect We collect only the personal information necessary to process reservations, communicate with guests, and improve our services:

• Booking Information: Name, email address, phone number, billing address, arrival/departure dates, guest numbers, and payment transaction details (processed securely via third-party payment gateways; we never store full card numbers).
• Direct Enquiries: Details you provide when contacting us via contact forms, email, or telephone.
• Technical & Browsing Data: IP address, browser type, device information, operating system, and on-site behaviour collected via cookies and tracking tags.

3. How We Use Your Data & Legal Bases We process your personal information under the following lawful bases:

• Contractual Necessity: To manage, confirm, and administer your holiday accommodation bookings and customer support requests.
• Consent: For tracking cookies, marketing campaigns, and analytics (which you can grant or withdraw at any time).
• Legitimate Interests: To prevent fraud, maintain site security, and improve our website performance.
• Legal Obligation: To comply with tax, accounting, and statutory record-keeping requirements.

4. Cookies and Tracking Technologies Our website uses essential, analytics, and marketing cookies. When you first visit, you can set your preferences via the Lodgify cookie banner.

• Essential Cookies: Deployed automatically by Lodgify to enable core site functionality, maintain your booking session, and secure payment processing. These cannot be disabled.
• Analytics Cookies (Google Analytics): Collect anonymous aggregated data about how visitors interact with our site (pages visited, time on page, traffic sources) to help us optimize user experience.
• Advertising & Retargeting Cookies (Google Ads & Meta Pixel): Measure campaign effectiveness, track booking conversions, and serve relevant accommodation ads to users across Google and Meta platforms (Facebook and Instagram).

You can review or adjust your cookie consent settings at any time using the cookie preferences link in our website footer or by adjusting your browser settings.

5. Third-Party Service Providers We do not sell your personal data. We share relevant data only with vetted third parties essential to our operations:

• Lodgify: Website hosting, property management system, and booking software.
• Google LLC: Analytics and conversion tracking via Google Analytics and Google Ads.
• Meta Platforms Ireland Ltd: Conversion measurement and advertising attribution via the Meta Pixel.
• Payment Gateways (e.g., Stripe): Secure, PCI-DSS-compliant transaction processing.

Where data is processed outside the UK, appropriate safeguards (such as UK International Data Transfer Agreements or Standard Contractual Clauses) are applied.

6. Data Retention & Your Rights

• We retain booking and financial records for up to 7 years to satisfy statutory tax obligations under UK law. Marketing data and cookie identifiers are retained only as long as necessary or until consent is withdrawn.
• Under UK data protection laws, you have the right to request access to, correction of, or erasure of your personal data, as well as the right to object to or restrict processing.
• To exercise any of these rights, contact us directly at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk