[ Print this page ]

Home » Access Statement & Privacy and Cookies Policy » Privacy and Cookies Policy

Privacy and Cookies Policy


All serviced and self-catering accommodation premises must keep a record of all guests over the age of 16 (Immigration (Hotel Records) Order 1972 (as amended)).

Key facts

  • All serviced and self-catering accommodation premises must keep a record of all guests over the age of 16. The record should include their full name and nationality.
  • You must keep each guest's details for at least 12 months.
  • If you hold any personal information on guests or any other individuals, including employees (other than on odd scraps of paper), the Data Protection Act applies.
  • The General Data Protection Regulation (GDPR) comes into force on 25th May 2018, replacing the Data Protection Act (DPA).
  • Note: you are not legally required to take a guest's home address or contact number.


For all who are not British, Irish or Commonwealth guests:

  • passport number and place of issue (or other document which shows their identity and nationality)
  • details of their next destination (including the address, if known) on or before departure.



The business receives personal information in respect to bookings of accommodation made by guests in line with legal requirements above and consent of guests with a view to confirming bookings, providing information about facilities and arrival times.

Such information is stored on a manual register/ guest book and on tycastellguesthouse@yahoo.co.uk email account which is password protected. No guest financial details are taken by email or other electronic form, nor stored manually.

The business is exempt from notifying the Information Commissioner as guest information is not used for marketing or advertising, other than where guests themselves leave reviews, or disclosed to third parties. I may occasionally refer back to previous email or message for reference to a guests last stay as part of customer familiarity.

Records are retained however for accounting / financial purposes as record of occupancy/ income/revenue for Inland Revenue which require record keeping over a 6 year period. Thereafter such records are destroyed.



Although not familiar with technicalities of website there is a background less intrusive cookie performing analytics or diagnostics relating to visits and time site viewed but to best of knowledge other marketing cookies and such like are not present, and no personal information is collected.



No CCTV is in operation on the premises internally or externally however I am aware of neighbouring cameras that perhaps can bring into scope car park area.