Privacy Policy

Mossyards Holiday Cottages (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

Data Controller and Contact

Mossyards Holiday Cottages is the data controller for your personal information. For any privacy questions or requests, please contact us at via our handy webform, phone +44 (0)1343 830250, or by mail at Mossyards Holiday Cottages, Roseisle, Moray, Scotland, IV30 5YD.

Information We Collect

We may collect personal data you provide directly when booking, contacting us, or subscribing to communications. This includes your name, email address, postal address, phone number, and payment details. Additionally, we collect certain technical data such as IP address, browser type, and usage information via server logs and cookies to help maintain security, analyse usage, and improve site performance.

How We May Use Your Information

  • To perform and manage bookings and payments: necessary for contract performance.
  • To communicate with you: including booking confirmations and customer support, based on contract and legitimate interest.
  • To comply with legal obligations: such as tax and accounting requirements.
  • To improve our website and services: based on legitimate interests.
  • For marketing purposes: only with your explicit consent where applicable.

Data Sharing and International Transfers

We do not sell, rent, or share your personal data for marketing or commercial purposes. Personal data you provide through the contact form is used solely to respond to your inquiry and is processed securely by our email service provider. The only cookies we use are essential session cookies required for website functionality and are not shared with third parties. Where any data is transmitted to third-party providers (such as our hosting or email service), these providers are bound by strict confidentiality and data protection agreements. If data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses, are implemented to protect your information.

Your Rights

You have the following rights under UK GDPR:

  • Right to access your personal data
  • Right to correct inaccurate or incomplete data
  • Right to request deletion (“right to be forgotten”) where applicable
  • Right to restrict or object to certain processing
  • Right to data portability
  • Right to withdraw consent at any time without affecting prior processing
  • Right to lodge a complaint with the Information Commissioner’s Office (ICO website)

To exercise these rights, please contact us using the details above.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined above, including compliance with legal, accounting, or reporting requirements. After this period, data is securely deleted or anonymised.

Security

We take the security of your personal data seriously and have implemented appropriate measures to protect it from unauthorized access, loss, or misuse. Data access is strictly limited to Mossyards’ management and trusted technical support personnel who assist with maintaining secure and reliable systems. While we operate a small team, we are committed to handling your information responsibly and ensuring it remains protected at all times.

Children's Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children without parental consent. If you believe we have collected such data, please contact us immediately.

For detailed information about how we use cookies, please see our Cookie Policy.

Automated Decision-Making

We do not use automated decision-making or profiling processes that have legal or significant effects on you.

Where appropriate, we use encryption (such as HTTPS) to protect your personal data during transmission.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We encourage you to review this page periodically for updates.