Who we are
The Dairy is run by Victoria [TODO: full legal name], a sole trader, of [TODO: postal address, Braithwell, Rotherham, postcode]. We're the "controller" of the personal information described here. For anything about your data, email thedairy@braithwell.com.
What we collect
- When you request a booking: your name, email address, phone number (if you give it), your dates, the number of guests, and anything you write in the message box.
- Payment: card payments are handled by Stripe. We never see or store your full card number. Stripe tells us the payment status and the last four digits of your card.
- When you email us: whatever you include in your email.
- Website visits: anonymous, aggregated statistics (pages viewed, rough location by country, device type) from Vercel Web Analytics. It doesn't use cookies and can't identify you.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Handle your booking request, take payment, send booking emails and look after you during your stay | Contract: we need it to provide your stay |
| Keep financial records | Legal obligation (tax and accounting) |
| Keep the website working, secure and free from spam bookings | Legitimate interests |
| Understand which pages are useful, using anonymous statistics | Legitimate interests |
We don't send marketing emails, we don't sell your data, and we don't use it for automated decision-making.
Who we share it with
Only the services we need to run bookings. Each acts on our instructions under a data processing agreement:
- Stripe: payment processing.
- Supabase: our booking database.
- Resend: sends booking confirmation emails.
- Vercel: hosts this website and provides the anonymous visitor statistics.
Our availability calendar is synced with Airbnb, but only the dates are shared. Your name and contact details are never sent. We may also share information if the law requires it, for example with HMRC.
International transfers
Some of these providers store or process data outside the UK, including in the US and EU. When they do, the transfer is protected by UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Addendum to standard contractual clauses.
How long we keep it
- Confirmed bookings: six years after the end of the tax year of your stay, because HMRC requires us to keep financial records.
- Requests that don't go ahead (declined, expired or abandoned): deleted within 12 months.
- Emails: as long as needed to deal with your enquiry, then deleted.
Your rights
You have the right to ask for a copy of your data, and to have it corrected, deleted or restricted. You can also object to how we use it and ask us to transfer it to you or someone else. Some rights depend on the legal basis (for example, we can't delete records we have to keep for tax). Email us and we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies
We don't use tracking or advertising cookies. See our cookie notice for details.
Changes
If we change this policy, we'll update the date at the top of the page.