Privacy Notice

Last updated: October 2025

About us

Welcome to Windermere Lodges, a brand within Lodge Lets Ltd. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or book accommodation with us. Lodge Lets Ltd is registered with the Information Commissioner's Office (ICO), registration number ZB872092, and is a member of The Property Redress Scheme, membership number PRS050719.

Table of contents

BookingGuest
Personal Information You Provide
  • Full name and contact details (email address, phone number, postal address)
  • Payment and billing information (credit/debit card details, billing address)
  • Booking details (check-in/check-out dates, number of guests, special requirements)
  • Identification documents (as required for verification purposes)
  • Communication preferences and marketing consent
  • Any information you provide when contacting our customer service team
  • Information Automatically Collected
  • Device and browser information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent on site, clickstream data)
  • Cookies and similar tracking technologies (see our Cookie Policy below)
  • Location data (general geographic location based on IP address)
  • How We Use Your Information
  • Process and manage your lodge bookings and reservations
  • Send booking confirmations, payment receipts, and pre-arrival information
  • Communicate with you about your stay and respond to inquiries
  • Process payments and prevent fraudulent transactions
  • Obtain reviews and feedback on your visit
  • Improve our website, services, and customer experience
  • Contact you specifically about returning as a guest in the future
  • Include you in our general marketing communications (only with your consent)
  • Comply with legal obligations and resolve disputes
  • Analyse website usage and improve our offerings
  • Legal Basis for Processing (UK GDPR)
  • Contract Performance: To fulfil our booking agreement with you
  • Legitimate Interests: To improve our services and prevent fraud
  • Legal Obligation: To comply with tax, accounting, and legal requirements
  • Consent: For marketing communications and non-essential cookies
  • Sharing Your Information
  • White Cross Bay Holiday Park: To facilitate your accommodation and access to park facilities, or contact you in the event of any issues affecting access to the lodge or your stay
  • Our Cleaning Contractors: If they need to contact you in relation to forgotten property, or discuss any accessibility requirements
  • Payment Processors: To securely process your payments
  • Service Providers: Third-party companies that help us operate our business (email services, website hosting, customer support)
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In the event of a merger, sale, or transfer of business assets
  • Data Retention
  • Fulfil the purposes outlined in this policy
  • Comply with legal, accounting, and tax requirements (typically 7 years)
  • Resolve disputes and enforce our agreements
  • Your Rights
  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your personal data (subject to legal obligations)
  • Restriction: Limit how we use your data in certain circumstances
  • Portability: Receive your data in a structured, commonly used format
  • Object: Opt out of marketing communications and certain data processing
  • Withdraw Consent: Withdraw consent for processing based on consent
  • Cookies and Tracking Technologies
  • Enable essential website functionality
  • Remember your preferences and settings
  • Analyse website traffic and user behaviour
  • Deliver personalised content and advertisements (with consent)
  • Security
  • Secure socket layer (SSL) encryption for data transmission
  • Secure payment processing through PCI-DSS compliant providers
  • Regular security assessments and updates
  • Restricted access to personal data on a need-to-know basis
  • Third-Party Links
  • Our website may contain links to third-party websites (such as activity providers or local attractions). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.
  • Children's Privacy
  • Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
  • International Transfers
  • Standard Contractual Clauses approved by the UK Information Commissioner's Office
  • Transfers to countries with adequate data protection laws
  • Other legally approved transfer mechanisms
  • Changes to This Privacy Policy
  • We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. Significant changes will be communicated via email or prominent website notice.