Privacy Policy
Last updated: 9 January 2026
This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a booking.
Who We Are
This website is operated by Karen Rothman, an owner-managed self-catering holiday cottage in Scotland.
Data Controller:
Karen Rothman
Easter Lodge, Alcaig
Conon Bridge, Dingwall
IV78HS
Email: KADRothman@gmail.com
Telephone: 07444919225
What Personal Data We Collect
Information you provide
-
Name
-
Email address
-
Telephone number
-
Postal address
-
Booking details (dates of stay, number of guests, special requests)
Payment details are processed securely by third-party providers. We do not store card details.
Information collected automatically
When you visit our website, we may collect:
-
IP address
-
Browser type and device information
-
Pages visited and time spent on the site
This information is collected using cookies and similar technologies.
How We Use Your Data
We use personal data to:
-
Manage bookings and enquiries
-
Communicate with you about your stay
-
Comply with legal and accounting obligations
-
Improve our website and services
We do not use your data for automated decision-making.
Lawful Basis for Processing
We process personal data under the following lawful bases:
-
Contract – to fulfil bookings
-
Legal obligation – accounting and tax requirements
-
Legitimate interests – running and improving our business
-
Consent – where required (e.g. non-essential cookies)
Booking System – Bookingmood
We use Bookingmood to manage availability and bookings. Bookingmood processes personal data on our behalf as a data processor.
Bookingmood Privacy Policy: https://www.bookingmood.com/privacy-policy/
Website Hosting – Wix
Our website is hosted on Wix. Wix may collect and process personal data through forms,
cookies, and analytics tools.
Wix Privacy Policy: https://www.wix.com/about/privacy
Data Sharing
We do not sell or rent personal data.
We may share data only with:
-
Bookingmood (booking management)
-
Wix (website hosting and analytics)
-
Payment providers
-
Professional advisers where legally required
All third parties are required to process data securely and lawfully.
Data Retention
-
Booking and financial records: retained as required by UK law
-
Enquiries without bookings: retained for a reasonable period
-
Marketing communications (if applicable): until consent is withdrawn
Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction or deletion
-
Restrict or object to processing
-
Withdraw consent at any time
To exercise these rights, contact us using the details above.
Complaints
If you are unhappy with how your data is handled, you may complain to the Information Commissioner’s Office (ICO) by visiting https://www.ico.org.uk or calling 0303 123 1113.
Changes to This Policy
This policy may be updated occasionally. The latest version will always be available on this page.