—— Privacy

A plain statement of privacy

No tracking, no analytics, no marketing list. Reservation data held in our internal property-management system, kept seven years, then deleted.

This website is a static editorial site. It sets no tracking cookies, loads no analytics, runs no advertising, and shares no data with any third party. There is no marketing list. There are no embedded social-media widgets, no remarketing pixels, and no chat widgets.

What we hold when you book

When you make a reservation by email or by telephone we record your name, the names of any guests sharing your room, your contact details, your stay dates, any dietary or accessibility notes you give us, and the payment record. These are held in our internal property-management system, hosted on servers within the United Kingdom and accessed by Alice, Robert, and Helena. Records are retained for seven years to satisfy HMRC bookkeeping obligations, then deleted.

We do not pass your details to any other business. We do not sell or rent any data. We do not use your details for marketing unless you have specifically asked to receive the seasonal letter, which goes out three times a year and which you may stop at any time by writing to us.

Access, correction, deletion

You have the right under the UK General Data Protection Regulation and the Data Protection Act 2018 to ask us what personal data we hold about you, to ask us to correct it if it is wrong, and to ask us to delete it where we are not required to retain it for tax or legal reasons. Please write to reception@blythmaltingshouse.com and we will reply within thirty days.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office, the UK's data-protection authority.

How the site itself works

The site is static HTML and CSS served from a commercial hosting provider. Standard server access logs are kept by the host for fourteen days for security purposes and contain the requesting IP address, the URL, and the user agent. We do not access these logs except in the event of a security incident.